This Section 13.3.3.1 summarises the structure of the Update Security Credentials Command, which depends on credentialsReplacementMode and the deviceType of the Device.
If credentialsReplacementMode = anyByContingency or anyExceptAbnormalRootByRecovery then an Update Security Credential Details Command shall be the concatenation:
Grouping Header || @UpdateSecurityCredentials.CommandPayload || 0x40 || KRP Signature
If credentialsReplacementMode = accessControlBrokerByACB and deviceType is not communicationsHubCommunicationsHubFunction then an Update Security Credentials Command shall be the concatenation:
MAC Header || Grouping Header || @UpdateSecurityCredentials.CommandPayload || 0x00 || ACB-SMD MAC
In all other cases, the Update Security Credentials Command shall either be the concatenation:
MAC Header || Grouping Header || @UpdateSecurityCredentials.CommandPayload || 0x40 || KRP Signature|| ACB-SMD MAC
In these Command structures:
@UpdateSecurityCredentials.CommandPayload shall be an octet string containing the DER encoding of the populated ASN.1 structure (as laid out in Section 13.3.5.11);
Grouping Header shall be constructed as specified in Section 7.2.7 with Business Originator ID being the Entity Identifier of the Known Remote Party which generated KRP Signature, and with Business Originator Counter being that of the same Known Remote Party;
KRP Signature shall be generated as specified in Section 6.3.3;
ACB Grouping Header shall be constructed as specified in Section 7.2.7 with Business Originator ID being the Entity Identifier of the Access Control Broker and Business Originator Counter being that of the Access Control Broker;
MAC Header shall be constructed as specified in Section 7.2.5; and
ACB-SMD MAC shall be calculated as specified in Section 6.2.3.
Share with your friends: |