Tokenauthenticatie en xml signature in detail

•Descargar como PPTX, PDF•

0 recomendaciones•322 vistas

Marc de Graauw

Tecnología Noticias y política

Tokenauthenticatie& XML Signaturein detail

Tokenauthenticatie smartcard met private key Certificaat QURX_ EX990011NL token maken SignedInfo maken RSA / SHA sig maken signedData SignedInfo SignatureValue Bericht maken SOAP bericht

Transformatie XML 2 SignedData Verstrekkings- Lijstquery QURX_IN990111NL_01.xml signedData.xsl signedData QURX_IN990111NL_01_signedData.xml

signedData X.509 Strong Authentication message id nonce unieke indentificatie van bericht (if duplicate removal has already taken place) notBefore & notAfter time to live security semantics can expire time to store & check nonce addressedParty replay against other receivers Koppeling met bericht BSN voor patiëntgerelateerde berichten Trigger Event Id versieonafhankelijk, itt. InteractionId

Whitespace eruit signedData QURX_IN990111NL_01_signedData.xml remove- whitespace- between- elements.xsl signedData QURX_IN990111NL_01_signedData.xml

Exclusive Canonicalization signedData QURX_IN990111NL_01_signedData.xml excc14n (Oxygen gebruikt) signedData excc14n signedData_ excc14n.xml

Exclusive Canonicalization Dubbele quotes ipv. enkele Namespace declaraties vóór attributen Namespaces alfabetisch rangschikken Linefeed, geen carriage return of CR/LF Geen Byte Order Mark UTF-8

Signed Info element signedData excc14n signedData_ excc14n.xml bits SignedInfo template SHA1 hash wsu Id 160 bits maken SignedInfo Base64 karakters SignedInfo SignedInfo.xml

SHA: Cryptographic hash Wikipedia: A cryptographic hash function is a deterministic procedure that takes an arbitrary block of data and returns a fixed-size bit string, the (cryptographic) hash value, such that an accidental or intentional change to the data will change the hash value.

SHA SHA1 ... SHA256 1995: SHA-1 NSA 2005: zwaktes in SHA-1 ontdekt 2001: SHA-2 (225, 256, 384, 512) 2008 – 12: SHA-3, open competitie SHA-1 input: message maximum (264 − 1) bits output: 160 bits

Base 64 UTF-8: niet alle octets zijn toegestaan! Ergo: binaire data kunnen niet zomaar in XML / UTF-8 Oplossing: bits -> karakters RFC2045 (MIME) alfabet: [A-Z][a-z][0-9]+/

SHA + Base64 Input (bits) SHA1 (160 bits) 4vBP5K5M5llABaWYzxCrKIdjS2I= Base 64

RSA with SHA SignedInfo (exc c14n) private key bits SHA1 hash 400 bits RSA 160 bits 408 bits ASN.1 DER formaat Base64 3021300906 052b0e0302 1a05000414 karakters 3031300d06 0960864801 6503040201 05000420 SignatureValue SHA 256 -> 464 bits

Sender Receiver “Hello world” “Hello world” SHA-1 hash: 5llABaWYz xCrKIdjS... Public key: MIICHzCCAY ygAwIBAgI..... OK Private key: shhhh..... RSA sig value: c9fVK7vYAdv s2DRZVtS... RSA sig value: c9fVK7vYAdv s2DRZVtS...

Security Services (X.800) Authentication Authorization Data Confidentiality Data Integrity Non-repudiation

SOAP bericht signedData SignedInfo SignatureValue Certificaat verwijzing QURX_ EX990011NL Header maken Header maken authentication Tokens wss:Security Bericht maken SOAP bericht

RSA with SHA SignedInfo (exc c14n) private key bits SHA1 hash 400 bits RSA 160 bits 160 bits ASN.1 DER formaat Base64 3021300906 052b0e0302 1a05000414 karakters 3031300d06 0960864801 6503040201 05000420 SignatureValue SHA 256 -> 464 bits

Más contenido relacionado

Más de Marc de Graauw

Elektronische handtekening in de zorgMarc de Graauw

Authentication and signatures overviewMarc de Graauw

Identiteit in de ictMarc de Graauw

Reliable messagingMarc de Graauw

Overzicht aortaMarc de Graauw

Hl7v3 schema issuesMarc de Graauw

Hl7v3 and web servicesMarc de Graauw

XML tekortkomingen en pluspuntenMarc de Graauw

Versioning theoryMarc de Graauw

Versiecontrole in de ketenMarc de Graauw

UnicodeMarc de Graauw

Luister niet naar de gebruikerMarc de Graauw

Overzicht hl7v3Marc de Graauw

Más de Marc de Graauw (13)

Elektronische handtekening in de zorg

Authentication and signatures overview

Identiteit in de ict

Reliable messaging

Overzicht aorta

Hl7v3 schema issues

Hl7v3 and web services

XML tekortkomingen en pluspunten

Versioning theory

Versiecontrole in de keten

Unicode

Luister niet naar de gebruiker

Overzicht hl7v3

Último

Where to Learn More About FDO _ Richard at FIDO Alliance.pdfFIDO Alliance

Event-Driven Architecture Masterclass: Integrating Distributed Data Stores Ac...ScyllaDB

Portal Kombat : extension du réseau de propagande russe中央社

Event-Driven Architecture Masterclass: Engineering a Robust, High-performance...ScyllaDB

Event-Driven Architecture Masterclass: Challenges in Stream ProcessingScyllaDB

How we scaled to 80K users by doing nothing!.pdfSrushith Repakula

WebAssembly is Key to Better LLM PerformanceSamy Fodil

Introduction to FIDO Authentication and Passkeys.pptxFIDO Alliance

Using IESVE for Room Loads Analysis - UK & IrelandIES VE

State of the Smart Building Startup Landscape 2024!Memoori

ASRock Industrial FDO Solutions in Action for Industrial Edge AI _ Kenny at A...FIDO Alliance

UiPath manufacturing technology benefits and AI overviewDianaGray10

Choosing the Right FDO Deployment Model for Your Application _ Geoffrey at In...FIDO Alliance

Hyatt driving innovation and exceptional customer experiences with FIDO passw...FIDO Alliance

JavaScript Usage Statistics 2024 - The Ultimate GuidePixlogix Infotech

2024 May Patch TuesdayIvanti

AI mind or machine power point presentationyogeshlabana357357

Google I/O Extended 2024 WarsawGDSC PJATK

Linux Foundation Edge _ Overview of FDO Software Components _ Randy at Intel.pdfFIDO Alliance

Easier, Faster, and More Powerful – Alles Neu macht der Mai -Wir durchleuchte...panagenda

Tokenauthenticatie en xml signature in detail

1. Tokenauthenticatie& XML Signaturein detail

2. Tokenauthenticatie smartcard met private key Certificaat QURX_ EX990011NL token maken SignedInfo maken RSA / SHA sig maken signedData SignedInfo SignatureValue Bericht maken SOAP bericht

3. Transformatie XML 2 SignedData Verstrekkings- Lijstquery QURX_IN990111NL_01.xml signedData.xsl signedData QURX_IN990111NL_01_signedData.xml

4. VerstrekkingsLijstquery

5. signedData X.509 Strong Authentication message id nonce unieke indentificatie van bericht (if duplicate removal has already taken place) notBefore & notAfter time to live security semantics can expire time to store & check nonce addressedParty replay against other receivers Koppeling met bericht BSN voor patiëntgerelateerde berichten Trigger Event Id versieonafhankelijk, itt. InteractionId

6. signedData.xml (pretty print)

7. Token versus bestand

8. Whitespace eruit signedData QURX_IN990111NL_01_signedData.xml remove- whitespace- between- elements.xsl signedData QURX_IN990111NL_01_signedData.xml

9. Exclusive Canonicalization signedData QURX_IN990111NL_01_signedData.xml excc14n (Oxygen gebruikt) signedData excc14n signedData_ excc14n.xml

10. Exclusive Canonicalization

11. Exclusive Canonicalization Dubbele quotes ipv. enkele Namespace declaraties vóór attributen Namespaces alfabetisch rangschikken Linefeed, geen carriage return of CR/LF Geen Byte Order Mark UTF-8

12. Signed Info element signedData excc14n signedData_ excc14n.xml bits SignedInfo template SHA1 hash wsu Id 160 bits maken SignedInfo Base64 karakters SignedInfo SignedInfo.xml

13. SHA: Cryptographic hash Wikipedia: A cryptographic hash function is a deterministic procedure that takes an arbitrary block of data and returns a fixed-size bit string, the (cryptographic) hash value, such that an accidental or intentional change to the data will change the hash value.

14. SHA SHA1 ... SHA256 1995: SHA-1 NSA 2005: zwaktes in SHA-1 ontdekt 2001: SHA-2 (225, 256, 384, 512) 2008 – 12: SHA-3, open competitie SHA-1 input: message maximum (264 − 1) bits output: 160 bits

15. Base 64 UTF-8: niet alle octets zijn toegestaan! Ergo: binaire data kunnen niet zomaar in XML / UTF-8 Oplossing: bits -> karakters RFC2045 (MIME) alfabet: [A-Z][a-z][0-9]+/

16. SHA + Base64 Input (bits) SHA1 (160 bits) 4vBP5K5M5llABaWYzxCrKIdjS2I= Base 64

17. SignedInfo

18. RSA with SHA SignedInfo (exc c14n) private key bits SHA1 hash 400 bits RSA 160 bits 408 bits ASN.1 DER formaat Base64 3021300906 052b0e0302 1a05000414 karakters 3031300d06 0960864801 6503040201 05000420 SignatureValue SHA 256 -> 464 bits

19. Sender Receiver “Hello world” “Hello world” SHA-1 hash: 5llABaWYz xCrKIdjS... Public key: MIICHzCCAY ygAwIBAgI..... OK Private key: shhhh..... RSA sig value: c9fVK7vYAdv s2DRZVtS... RSA sig value: c9fVK7vYAdv s2DRZVtS...

20.

21. Security Services (X.800) Authentication Authorization Data Confidentiality Data Integrity Non-repudiation

22. Security services

23. Key usage

24. SOAP bericht signedData SignedInfo SignatureValue Certificaat verwijzing QURX_ EX990011NL Header maken Header maken authentication Tokens wss:Security Bericht maken SOAP bericht

25. SOAP bericht

26.

27. Transformatie XML 2 SignedData Verstrekkings- Lijstquery QURX_IN990111NL_01.xml signedData.xsl signedData QURX_IN990111NL_01_signedData.xml

28. Whitespace eruit signedData QURX_IN990111NL_01_signedData.xml remove- whitespace- between- elements.xsl signedData QURX_IN990111NL_01_signedData.xml

29. Exclusive Canonicalization signedData QURX_IN990111NL_01_signedData.xml excc14n (Oxygen gebruikt) signedData excc14n signedData_ excc14n.xml

30. Signed Info element signedData excc14n signedData_ excc14n.xml bits SignedInfo template SHA1 hash wsu Id 160 bits maken SignedInfo Base64 karakters SignedInfo SignedInfo.xml

31. RSA with SHA SignedInfo (exc c14n) private key bits SHA1 hash 400 bits RSA 160 bits 160 bits ASN.1 DER formaat Base64 3021300906 052b0e0302 1a05000414 karakters 3031300d06 0960864801 6503040201 05000420 SignatureValue SHA 256 -> 464 bits

32. SOAP bericht signedData SignedInfo SignatureValue Certificaat verwijzing QURX_ EX990011NL Header maken Header maken authentication Tokens wss:Security Bericht maken SOAP bericht

33. Tokenauthenticatie smartcard met private key Certificaat QURX_ EX990011NL token maken SignedInfo maken RSA / SHA sig maken signedData SignedInfo SignatureValue Bericht maken SOAP bericht

Tokenauthenticatie en xml signature in detail

Recomendados

Recomendados

Más contenido relacionado

Más de Marc de Graauw

Más de Marc de Graauw (13)

Último

Último (20)

Tokenauthenticatie en xml signature in detail