org.jmrtd.protocol

Class TAProtocol

java.lang.Object

org.jmrtd.protocol.TAProtocol

public class TAProtocol
extends Object

The EAC Terminal Authentication protocol.

Since:

0.5.6

Version:

$Revision: $

Author:

The JMRTD team ([email protected])

Constructor Summary

Constructors

Constructor and Description
TAProtocol(PassportService service, SecureMessagingWrapper wrapper)

Method Summary

Modifier and Type	Method and Description
TAResult	doTA(CVCPrincipal caReference, List<CardVerifiableCertificate> terminalCertificates, PrivateKey terminalKey, String taAlg, CAResult chipAuthenticationResult, String documentNumber) Perform TA (Terminal Authentication) part of EAC (version 1).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TAProtocol

public TAProtocol(PassportService service,
                  SecureMessagingWrapper wrapper)

Method Detail

doTA

public TAResult doTA(CVCPrincipal caReference,
                     List<CardVerifiableCertificate> terminalCertificates,
                     PrivateKey terminalKey,
                     String taAlg,
                     CAResult chipAuthenticationResult,
                     String documentNumber)
              throws net.sf.scuba.smartcards.CardServiceException

Perform TA (Terminal Authentication) part of EAC (version 1). For details see TR-03110 ver. 1.11. In short, we feed the sequence of terminal certificates to the card for verification, get a challenge from the card, sign it with terminal private key, and send back to the card for verification.

Parameters:

caReference - reference issuer

terminalCertificates - terminal certificate chain

terminalKey - terminal private key

taAlg - algorithm

chipAuthenticationResult - the chip authentication result

documentNumber - the document number

Returns:

the challenge from the card

Throws:

net.sf.scuba.smartcards.CardServiceException - on error