89 lines
11 KiB
Plaintext
89 lines
11 KiB
Plaintext
<mxfile host="app.diagrams.net" agent="Buergerabstimmung" version="24.0.0">
|
|
<diagram name="Datenfluss technisch" id="dfl-technisch">
|
|
<mxGraphModel dx="1200" dy="1560" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1200" pageHeight="1560" math="0" shadow="0">
|
|
<root>
|
|
<mxCell id="0" />
|
|
<mxCell id="1" parent="0" />
|
|
<mxCell id="t" value="Datenfluss eID-Anmeldung — technische Fassung" style="text;html=1;align=center;verticalAlign=middle;fontSize=19;fontStyle=1;fontColor=#111111;" vertex="1" parent="1">
|
|
<mxGeometry x="30" y="16" width="1140" height="30" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="u" value="Feldnamen und Protokolle wie im Quelltext. Rot gestrichelt: im Code noch nicht vorhanden." style="text;html=1;align=center;verticalAlign=middle;fontSize=12;fontStyle=0;fontColor=#555555;" vertex="1" parent="1">
|
|
<mxGeometry x="30" y="48" width="1140" height="20" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="lane0" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F7F7F7;strokeColor=#BBBBBB;dashed=1;" vertex="1" parent="1">
|
|
<mxGeometry x="40" y="84" width="340" height="1230" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="kopf0" value="Bürgerin oder Bürger<br><font style="font-size:11px">Handy, AusweisApp, Ausweis</font>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#37474F;strokeColor=none;fontColor=#FFFFFF;fontSize=14;fontStyle=1;verticalAlign=middle;" vertex="1" parent="1">
|
|
<mxGeometry x="40" y="84" width="340" height="50" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="lane1" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F7F7F7;strokeColor=#BBBBBB;dashed=1;" vertex="1" parent="1">
|
|
<mxGeometry x="430" y="84" width="340" height="1230" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="kopf1" value="Webserver Bürgerabstimmung<br><font style="font-size:11px">PHP, SQLite</font>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#37474F;strokeColor=none;fontColor=#FFFFFF;fontSize=14;fontStyle=1;verticalAlign=middle;" vertex="1" parent="1">
|
|
<mxGeometry x="430" y="84" width="340" height="50" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="lane2" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#F7F7F7;strokeColor=#BBBBBB;dashed=1;" vertex="1" parent="1">
|
|
<mxGeometry x="820" y="84" width="340" height="1230" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="kopf2" value="eID-Server<br><font style="font-size:11px">BSI TR-03130</font>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#37474F;strokeColor=none;fontColor=#FFFFFF;fontSize=14;fontStyle=1;verticalAlign=middle;" vertex="1" parent="1">
|
|
<mxGeometry x="820" y="84" width="340" height="50" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s1" value="<b>1</b>&nbsp; Anmeldung angefordert" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#37474F;strokeWidth=1;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="60" y="165" width="300" height="55" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s2" value="<b>2</b>&nbsp; Vorgang anlegen<br><font style="font-family:Courier New;font-size:11px">INSERT eid_flows (nonce 32 hex,<br>session_id, created_at) · TTL 600 s</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#37474F;strokeWidth=1;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="450" y="265" width="300" height="95" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s3" value="<b>3</b>&nbsp; AusweisApp fordert das TC-Token an" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#37474F;strokeWidth=1;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="60" y="400" width="300" height="60" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s4" value="<b>4</b>&nbsp; TC-Token erzeugen<br><font style="font-family:Courier New;font-size:11px">ServerAddress<br>SessionIdentifier<br>RefreshAddress = /eid/callback<br>CommunicationErrorAddress = …?e=1<br>Binding = urn:liberty:paos:2006-08</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#37474F;strokeWidth=1;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="450" y="500" width="300" height="130" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="sX" value="<b>fehlt</b>&nbsp; PathSecurity-Protocol und<br>PathSecurity-Parameters (TLS-PSK)<br><font style="font-family:Courier New;font-size:11px">PSK wird aus useIDResponse nicht gelesen</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFEBEE;strokeColor=#B71C1C;strokeWidth=2;dashed=1;fontSize=13;fontColor=#B71C1C;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="450" y="655" width="300" height="75" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s5" value="<b>5</b>&nbsp; AusweisApp verbindet sich mit dem eID-Server" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#37474F;strokeWidth=1;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="60" y="775" width="300" height="60" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s6" value="<b>6</b>&nbsp; useIDRequest<br><font style="font-family:Courier New;font-size:11px">UseOperations:<br>RestrictedIdentification REQUIRED</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#1B5E20;strokeWidth=2;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="840" y="870" width="300" height="90" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s7" value="<b>7</b>&nbsp; Ausweis auflegen<br><font style="font-family:Courier New;font-size:11px">NFC ISO/IEC 14443<br>PACE mit 6-stelliger eID-PIN<br>Terminal Authentication mit CVC<br>Ausweis liefert nur die RestrictedID</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#37474F;strokeWidth=1;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="60" y="995" width="300" height="120" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="sY" value="<b>fehlt</b>&nbsp; getResultRequest und<br>Auswertung der getResultResponse<br><font style="font-family:Courier New;font-size:11px">getResult kommt im Quelltext nicht vor</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFEBEE;strokeColor=#B71C1C;strokeWidth=2;dashed=1;fontSize=13;fontColor=#B71C1C;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="840" y="1150" width="300" height="75" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="s8" value="<b>8</b>&nbsp; Kennung ableiten<br><font style="font-family:Courier New;font-size:11px">pseudonym_hash = hash_hmac('sha256',<br>RestrictedID, pepper)<br>INSERT INTO users · RestrictedID verworfen</font>" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#1B5E20;strokeWidth=2;fontSize=13;verticalAlign=middle;arcSize=8;" vertex="1" parent="1">
|
|
<mxGeometry x="450" y="1150" width="300" height="110" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e1" value="HTTPS<br>GET /eid/start" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#37474F;strokeWidth=2;fontSize=11;fontFamily=Courier New;fontColor=#333333;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s1" target="s2">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e2" value="303 auf 127.0.0.1:24727/eID-Client<br>?tcTokenURL=https://&lt;host&gt;/eid/tctoken?s=&lt;nonce&gt;" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#37474F;strokeWidth=2;fontSize=11;fontFamily=Courier New;fontColor=#333333;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s2" target="s3">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e3" value="HTTPS<br>GET /eid/tctoken?s=&lt;nonce&gt;" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#37474F;strokeWidth=2;fontSize=11;fontFamily=Courier New;fontColor=#333333;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s3" target="s4">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e4" value="TC-Token (XML)" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#37474F;strokeWidth=2;fontSize=11;fontFamily=Courier New;fontColor=#333333;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s4" target="s5">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e5" value="PAOS über TLS<br>SessionIdentifier" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#37474F;strokeWidth=2;fontSize=11;fontFamily=Courier New;fontColor=#333333;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s5" target="s6">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e6" value="Berechtigungszertifikat (CVC)<br>erlaubte Datenfelder" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#37474F;strokeWidth=2;fontSize=11;fontFamily=Courier New;fontColor=#333333;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s6" target="s7">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="e7" value="<b>RestrictedID</b>" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#1B5E20;strokeWidth=3;fontSize=11;fontFamily=Courier New;fontColor=#1B5E20;endArrow=block;endFill=1;labelBackgroundColor=#F7F7F7;" edge="1" parent="1" source="s7" target="s8">
|
|
<mxGeometry relative="1" as="geometry" />
|
|
</mxCell>
|
|
<mxCell id="fuss" value="Der Abschnitt von der useIDResponse bis zur gespeicherten Kennung ist im Code noch nicht umgesetzt." style="text;html=1;align=center;verticalAlign=middle;fontSize=12;fontStyle=0;fontColor=#B71C1C;" vertex="1" parent="1">
|
|
<mxGeometry x="30" y="1340" width="1140" height="24" as="geometry" />
|
|
</mxCell>
|
|
</root>
|
|
</mxGraphModel>
|
|
</diagram>
|
|
</mxfile>
|