Iso20022

CertificateManagementRequestV06

catm.007.001.06

The CertificateManagementRequest message is sent by a POI terminal or any intermediary entity either to a terminal manager acting as a certificate authority for managing X.509 certificate of a public key owned by the initiating party, or for requesting the inclusion or the removal of the POI to a white list of the terminal manager.

Message Construction

Every ISO20022 message has at the highest level what we call ‘building blocks’. Because the message is constructed as immutable records, the association is by composition. Below you can see the relationship between the message and its constituent building blocks: For comparison, see the ISO20022 official specification

classDiagram
     direction LR
%% CertificateManagementRequestV06 recursion level 0 with max 0
CertificateManagementRequestV06 *-- "1..1" TMSHeader1 : Header
CertificateManagementRequestV06 *-- "1..1" CertificateManagementRequest3 : CertificateManagementRequest
CertificateManagementRequestV06 *-- "0..1" ContentInformationType33 : SecurityTrailer

Now, we will zero-in one-by-one on each of these building blocks.

Header building block

Information related to the protocol management. Set of characteristics related to the transfer of transactions. For comparison, see the ISO20022 official specification

classDiagram
   direction tb
%% TMSHeader1 recursion level 0 with max 1
class TMSHeader1{
    DownloadTransfer IsoTrueFalseIndicator
    FormatVersion IsoMax6Text
    ExchangeIdentification IsoNumber
    CreationDateTime IsoISODateTime
}
TMSHeader1 *-- "1..1" GenericIdentification176 : InitiatingParty
TMSHeader1 *-- "0..1" GenericIdentification177 : RecipientParty
TMSHeader1 *-- "0..0" Traceability8 : Traceability
%% GenericIdentification176 recursion level 1 with max 1
class GenericIdentification176{
    Identification IsoMax35Text
    Type PartyType33Code
    Issuer PartyType33Code
    Country IsoMin2Max3AlphaText
    ShortName IsoMax35Text
}
%% GenericIdentification177 recursion level 1 with max 1
class GenericIdentification177{
    Identification IsoMax35Text
    Type PartyType33Code
    Issuer PartyType33Code
    Country IsoMin2Max3AlphaText
    ShortName IsoMax35Text
}
GenericIdentification177 *-- "0..1" NetworkParameters7 : RemoteAccess
GenericIdentification177 *-- "0..1" Geolocation1 : Geolocation
%% Traceability8 recursion level 1 with max 1
class Traceability8{
    ProtocolName IsoMax35Text
    ProtocolVersion IsoMax6Text
    TraceDateTimeIn IsoISODateTime
    TraceDateTimeOut IsoISODateTime
}
Traceability8 *-- "1..1" GenericIdentification177 : RelayIdentification

TMSHeader1 members

Member name Description Data Type / Multiplicity
DownloadTransfer Indicates if the file transfer is a download or an upload. IsoTrueFalseIndicator - Required 1..1
FormatVersion Version of file format. IsoMax6Text - Required 1..1
ExchangeIdentification Unique identification of an exchange occurrence. IsoNumber - Required 1..1
CreationDateTime Date and time at which the file or message was created. IsoISODateTime - Required 1..1
InitiatingParty Unique identification of the partner that has initiated the exchange. GenericIdentification176 - Required 1..1
RecipientParty Unique identification of the partner that is the recipient of the exchange. GenericIdentification177 - Optional 0..1
Traceability Identification of partners involved in exchange from the merchant to the issuer, with the relative timestamp of their exchanges. Traceability8 - Unknown 0..0

CertificateManagementRequest building block

Information related to the request of certificate management. Information related to the request of certificate management. For comparison, see the ISO20022 official specification

classDiagram
   direction tb
%% CertificateManagementRequest3 recursion level 0 with max 1
class CertificateManagementRequest3{
    CertificateService CardPaymentServiceType10Code
    SecurityDomain IsoMax70Text
    KeyFunction KeyUsage1Code
    POIChallengeValue IsoMax140Binary
    POIDateTime IsoISODateTime
    BinaryCertificationRequest IsoMax20000Text
    ClientCertificate IsoMax10KBinary
}
CertificateManagementRequest3 *-- "1..1" GenericIdentification176 : POIIdentification
CertificateManagementRequest3 *-- "0..1" GenericIdentification176 : TMIdentification
CertificateManagementRequest3 *-- "0..1" CertificationRequest1 : CertificationRequest
CertificateManagementRequest3 *-- "0..1" PointOfInteraction6 : WhiteListIdentification
%% GenericIdentification176 recursion level 1 with max 1
class GenericIdentification176{
    Identification IsoMax35Text
    Type PartyType33Code
    Issuer PartyType33Code
    Country IsoMin2Max3AlphaText
    ShortName IsoMax35Text
}
%% GenericIdentification176 recursion level 1 with max 1
class GenericIdentification176{
    Identification IsoMax35Text
    Type PartyType33Code
    Issuer PartyType33Code
    Country IsoMin2Max3AlphaText
    ShortName IsoMax35Text
}
%% CertificationRequest1 recursion level 1 with max 1
class CertificationRequest1{
    KeyIdentification IsoMax140Text
    KeyVersion IsoMax140Text
}
CertificationRequest1 *-- "1..1" CertificationRequest2 : CertificateRequestInformation
%% PointOfInteraction6 recursion level 1 with max 1
class PointOfInteraction6{
    ManufacturerIdentifier IsoMax35Text
    Model IsoMax35Text
    SerialNumber IsoMax35Text
}

CertificateManagementRequest3 members

Member name Description Data Type / Multiplicity
POIIdentification Identification of the terminal or system using the certificate management service. GenericIdentification176 - Required 1..1
TMIdentification Identification of the TM or the MTM providing the Certificate Authority service. GenericIdentification176 - Optional 0..1
CertificateService Requested certificate management service. CardPaymentServiceType10Code - Required 1..1
SecurityDomain Identification of the client and server public key infrastructures containing the certificate. In addition, it may identify specific requirements of the customer. IsoMax70Text - Optional 0..1
KeyFunction Identifies type of function that could be used with the Key. KeyUsage1Code - Unknown 0..0
POIChallengeValue Challenge value sends by the POI to be received back in a message response. IsoMax140Binary - Required 1..1
POIDateTime Date and Time of the POI. IsoISODateTime - Required 1..1
BinaryCertificationRequest PKCS#10 (Public Key Certificate Standard 10) certification request coded in base64 ASN.1/DER (Abstract Syntax Notation 1, Distinguished Encoding Rules) or PEM (Privacy Enhanced Message) format. IsoMax20000Text - Optional 0..1
CertificationRequest Certification request PKCS#10 (Public Key Certificate Standard 10) for creation or renewal of an X.509 certificate. CertificationRequest1 - Optional 0..1
ClientCertificate Created certificate. The certificate is ASN.1/DER encoded, for renewal or revocation of certificate. IsoMax10KBinary - Optional 0..1
WhiteListIdentification Identification of the white list element, for white list addition or removal. PointOfInteraction6 - Optional 0..1

SecurityTrailer building block

Trailer of the message containing a MAC or a digital signature. General cryptographic message syntax (CMS) containing data. protected by a MAC or a digital signature. For comparison, see the ISO20022 official specification

classDiagram
   direction tb
%% ContentInformationType33 recursion level 0 with max 1
class ContentInformationType33{
    ContentType ContentType2Code
}
ContentInformationType33 *-- "0..1" AuthenticatedData9 : AuthenticatedData
ContentInformationType33 *-- "0..1" SignedData8 : SignedData
%% AuthenticatedData9 recursion level 1 with max 1
class AuthenticatedData9{
    Version IsoNumber
    MAC IsoMax140Binary
}
AuthenticatedData9 *-- "1..0" IRecipient14Choice : Recipient
AuthenticatedData9 *-- "1..1" AlgorithmIdentification22 : MACAlgorithm
AuthenticatedData9 *-- "1..1" EncapsulatedContent3 : EncapsulatedContent
%% SignedData8 recursion level 1 with max 1
class SignedData8{
    Version IsoNumber
    Certificate IsoMax5000Binary
}
SignedData8 *-- "0..0" AlgorithmIdentification21 : DigestAlgorithm
SignedData8 *-- "0..1" EncapsulatedContent3 : EncapsulatedContent
SignedData8 *-- "0..0" Signer7 : Signer

ContentInformationType33 members

Member name Description Data Type / Multiplicity
ContentType Type of data protection. ContentType2Code - Required 1..1
AuthenticatedData Data protection by a message authentication code (MAC). AuthenticatedData9 - Optional 0..1
SignedData Data protected by a digital signatures. SignedData8 - Optional 0..1

Extensibility and generalization considerations

To facilitate generalized design patterns in the system, the CertificateManagementRequestV06 implementation follows a specific implementaiton pattern. First of all, CertificateManagementRequestV06 impleemnts IOuterRecord indicating it is the outermost logical part of the message definition. Like all message wrappers, CertificateManagementRequestV06Document implements IOuterDocument. Because CertificateManagementRequestV06 implements IOuterDocument, it is a suitable template parameter for IOuterDocument, and causes the internal ‘Message’ to be of type CertificateManagementRequestV06.

classDiagram
    class IOuterRecord
    CertificateManagementRequestV06 --|> IOuterRecord : Implements
    CertificateManagementRequestV06Document --|> IOuterDocument~CertificateManagementRequestV06~ : Implements
    class IOuterDocument~CertificateManagementRequestV06~ {
        CertificateManagementRequestV06 Message
     }

Document wrapper for serialization

The only real purpose CertificateManagementRequestV06Document serves is to cause the document to be serialized into the ‘urn:iso:std:iso:20022:tech:xsd:catm.007.001.06’ namespace. Therefore, it will probably be the usual practice to build the message and construct this wrapper at the last minute using CertificateManagementRequestV06.ToDocument() method. The returned CertificateManagementRequestV06Document value will serialize correctly according to ISO 20022 standards.

classDiagram
    CertificateManagementRequestV06Document *-- CertificateManagementRequestV06 : Document

Sample of message format

This is an abbreviated version of what the message should look like.

<Document xmlns="urn:iso:std:iso:20022:tech:xsd:catm.007.001.06">
    <CertMgmtReq>
        <Hdr>
            <!-- Header inner content -->
        </Hdr>
        <CertMgmtReq>
            <!-- CertificateManagementRequest inner content -->
        </CertMgmtReq>
        <SctyTrlr>
            <!-- SecurityTrailer inner content -->
        </SctyTrlr>
    </CertMgmtReq>
</Document>

Data from ISO specification

This is the technical data from the specification document.

<messageDefinition
  xmi:id="_RC0PQXPXEe2pK6udhxEaHA"
  previousVersion="_JeRIcVE_EeyApZmLzm74zA"
  name="CertificateManagementRequestV06"
  definition="The CertificateManagementRequest message is sent by a POI terminal or any intermediary entity either to a terminal manager acting as a certificate authority for managing X.509 certificate of a public key owned by the initiating party, or for requesting the inclusion or the removal of the POI to a white list of the terminal manager.&#xD;&#xA;"
  registrationStatus="Registered"
  messageSet="_WYMCwJVPEeO6Q83g-JIX_w"
  xmlTag="CertMgmtReq"
  rootElement="Document"
  xmlns:xmi="http://www.omg.org/XMI">
  <messageBuildingBlock
    xmi:id="_RC0PQ3PXEe2pK6udhxEaHA"
    previousVersion="_JeRIc1E_EeyApZmLzm74zA"
    name="Header"
    definition="Information related to the protocol management."
    registrationStatus="Provisionally Registered"
    maxOccurs="1"
    minOccurs="1"
    xmlTag="Hdr"
    complexType="_ROuPdwuhEeqw5uEXxQ9H4g" />
  <messageBuildingBlock
    xmi:id="_RC0PRXPXEe2pK6udhxEaHA"
    previousVersion="_JeRIdVE_EeyApZmLzm74zA"
    name="CertificateManagementRequest"
    definition="Information related to the request of certificate management."
    registrationStatus="Provisionally Registered"
    maxOccurs="1"
    minOccurs="1"
    xmlTag="CertMgmtReq"
    complexType="_9xqf4XIvEe299ZbWCkdR_w" />
  <messageBuildingBlock
    xmi:id="_RC0PR3PXEe2pK6udhxEaHA"
    previousVersion="_JeRId1E_EeyApZmLzm74zA"
    name="SecurityTrailer"
    definition="Trailer of the message containing a MAC or a digital signature."
    registrationStatus="Provisionally Registered"
    maxOccurs="1"
    minOccurs="0"
    xmlTag="SctyTrlr"
    complexType="_sqC0wXDIEe2MCaKO5AtGsA" />
  <messageDefinitionIdentifier
    businessArea="catm"
    messageFunctionality="007"
    flavour="001"
    version="06" />
</messageDefinition>

ISO Building Blocks

The following items are used as building blocks to construct this message.