PageRenderTime 53ms CodeModel.GetById 29ms RepoModel.GetById 1ms app.codeStats 0ms

/libpskc/schemas/pskc-schema.xsd

https://gitlab.com/ssbarnea/oath-toolkit
XML Schema | 307 lines | 303 code | 4 blank | 0 comment | 0 complexity | f954d99c70b40369b26ca03e15262372 MD5 | raw file
    

  1. <?xml version="1.0" encoding="UTF-8"?>
    2. 

  2. <!--
    3. 

  3. 

  4. Extracted from RFC 6030.  Modified as follows:
    5. 

  5. 

  6. 1) Signature element handling.
    7. 

  7.    <http://article.gmane.org/gmane.ietf.keyprov/1011>.
    8. 

  8. 

  9. 2) Make AlgorithmParameter a sequence not a choice.
    10. 

  10.    <http://www.rfc-editor.org/errata_search.php?eid=2759>
    11. 

  11. 

  12. -->
    13. 

  13. <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
    14. 

  14.      xmlns:pskc="urn:ietf:params:xml:ns:keyprov:pskc"
    15. 

  15.      xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
    16. 

  16.      xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
    17. 

  17.      targetNamespace="urn:ietf:params:xml:ns:keyprov:pskc"
    18. 

  18.      elementFormDefault="qualified"
    19. 

  19.      attributeFormDefault="unqualified">
    20. 

  20.      <xs:import namespace="http://www.w3.org/2000/09/xmldsig#"
    21. 

  21.           schemaLocation=
    22. 

  22. "http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/
    23. 

  23.           xmldsig-core-schema.xsd"/>
    24. 

  24.      <xs:import namespace="http://www.w3.org/2001/04/xmlenc#"
    25. 

  25.           schemaLocation=
    26. 

  26. "http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/xenc-schema.xsd"/>
    27. 

  27.      <xs:import namespace="http://www.w3.org/XML/1998/namespace"/>
    28. 

  28.      <xs:complexType name="KeyContainerType">
    29. 

  29.           <xs:sequence>
    30. 

  30.                <xs:element name="EncryptionKey"
    31. 

  31.                     type="ds:KeyInfoType" minOccurs="0"/>
    32. 

  32.                <xs:element name="MACMethod"
    33. 

  33.                     type="pskc:MACMethodType" minOccurs="0"/>
    34. 

  34.                <xs:element name="KeyPackage"
    35. 

  35.                     type="pskc:KeyPackageType" maxOccurs="unbounded"/>
    36. 

  36.                <xs:element ref="ds:Signature" minOccurs="0"/>
    37. 

  37.                <xs:element name="Extensions"
    38. 

  38.                     type="pskc:ExtensionsType"
    39. 

  39.                     minOccurs="0" maxOccurs="unbounded"/>
    40. 

  40.           </xs:sequence>
    41. 

  41.           <xs:attribute name="Version"
    42. 

  42.                type="pskc:VersionType" use="required"/>
    43. 

  43.           <xs:attribute name="Id"
    44. 

  44.                type="xs:ID" use="optional"/>
    45. 

  45.      </xs:complexType>
    46. 

  46.      <xs:simpleType name="VersionType" final="restriction">
    47. 

  47.           <xs:restriction base="xs:string">
    48. 

  48.                <xs:pattern value="\d{1,2}\.\d{1,3}"/>
    49. 

  49.           </xs:restriction>
    50. 

  50.      </xs:simpleType>
    51. 

  51.      <xs:complexType name="KeyType">
    52. 

  52.           <xs:sequence>
    53. 

  53.                <xs:element name="Issuer"
    54. 

  54.                     type="xs:string" minOccurs="0"/>
    55. 

  55.                <xs:element name="AlgorithmParameters"
    56. 

  56.                     type="pskc:AlgorithmParametersType"
    57. 

  57.                     minOccurs="0"/>
    58. 

  58.                <xs:element name="KeyProfileId"
    59. 

  59.                     type="xs:string" minOccurs="0"/>
    60. 

  60.                <xs:element name="KeyReference"
    61. 

  61.                     type="xs:string" minOccurs="0"/>
    62. 

  62.                <xs:element name="FriendlyName"
    63. 

  63.                     type="xs:string" minOccurs="0"/>
    64. 

  64.                <xs:element name="Data"
    65. 

  65.                     type="pskc:KeyDataType" minOccurs="0"/>
    66. 

  66.                <xs:element name="UserId"
    67. 

  67.                     type="xs:string" minOccurs="0"/>
    68. 

  68.                <xs:element name="Policy"
    69. 

  69.                     type="pskc:PolicyType" minOccurs="0"/>
    70. 

  70.                <xs:element name="Extensions"
    71. 

  71.                     type="pskc:ExtensionsType" minOccurs="0"
    72. 

  72.                     maxOccurs="unbounded"/>
    73. 

  73.           </xs:sequence>
    74. 

  74.           <xs:attribute name="Id"
    75. 

  75.                type="xs:string" use="required"/>
    76. 

  76.           <xs:attribute name="Algorithm"
    77. 

  77.                type="pskc:KeyAlgorithmType" use="optional"/>
    78. 

  78.      </xs:complexType>
    79. 

  79.      <xs:complexType name="PolicyType">
    80. 

  80.           <xs:sequence>
    81. 

  81.                <xs:element name="StartDate"
    82. 

  82.                     type="xs:dateTime" minOccurs="0"/>
    83. 

  83.                <xs:element name="ExpiryDate"
    84. 

  84.                     type="xs:dateTime" minOccurs="0"/>
    85. 

  85.                <xs:element name="PINPolicy"
    86. 

  86.                     type="pskc:PINPolicyType" minOccurs="0"/>
    87. 

  87.                <xs:element name="KeyUsage"
    88. 

  88.                     type="pskc:KeyUsageType"
    89. 

  89.                     minOccurs="0" maxOccurs="unbounded"/>
    90. 

  90.                <xs:element name="NumberOfTransactions"
    91. 

  91.                     type="xs:nonNegativeInteger" minOccurs="0"/>
    92. 

  92.                <xs:any namespace="##other"
    93. 

  93.                     minOccurs="0" maxOccurs="unbounded"/>
    94. 

  94.           </xs:sequence>
    95. 

  95.      </xs:complexType>
    96. 

  96.      <xs:complexType name="KeyDataType">
    97. 

  97.           <xs:sequence>
    98. 

  98.                <xs:element name="Secret"
    99. 

  99.                     type="pskc:binaryDataType" minOccurs="0"/>
    100. 

  100.                <xs:element name="Counter"
    101. 

  101.                     type="pskc:longDataType" minOccurs="0"/>
    102. 

  102.                <xs:element name="Time"
    103. 

  103.                     type="pskc:intDataType" minOccurs="0"/>
    104. 

  104.                <xs:element name="TimeInterval"
    105. 

  105.                     type="pskc:intDataType" minOccurs="0"/>
    106. 

  106.                <xs:element name="TimeDrift"
    107. 

  107.                     type="pskc:intDataType" minOccurs="0"/>
    108. 

  108.                <xs:any namespace="##other"
    109. 

  109.                     processContents="lax"
    110. 

  110.                     minOccurs="0" maxOccurs="unbounded"/>
    111. 

  111.           </xs:sequence>
    112. 

  112.      </xs:complexType>
    113. 

  113.      <xs:complexType name="binaryDataType">
    114. 

  114.           <xs:sequence>
    115. 

  115.                <xs:choice>
    116. 

  116.                     <xs:element name="PlainValue"
    117. 

  117.                          type="xs:base64Binary"/>
    118. 

  118.                     <xs:element name="EncryptedValue"
    119. 

  119.                          type="xenc:EncryptedDataType"/>
    120. 

  120.                </xs:choice>
    121. 

  121.                <xs:element name="ValueMAC"
    122. 

  122.                     type="xs:base64Binary" minOccurs="0"/>
    123. 

  123.           </xs:sequence>
    124. 

  124.      </xs:complexType>
    125. 

  125.      <xs:complexType name="intDataType">
    126. 

  126.           <xs:sequence>
    127. 

  127.                <xs:choice>
    128. 

  128.                     <xs:element name="PlainValue" type="xs:int"/>
    129. 

  129.                     <xs:element name="EncryptedValue"
    130. 

  130.                          type="xenc:EncryptedDataType"/>
    131. 

  131.                </xs:choice>
    132. 

  132.                <xs:element name="ValueMAC"
    133. 

  133.                     type="xs:base64Binary" minOccurs="0"/>
    134. 

  134.           </xs:sequence>
    135. 

  135.      </xs:complexType>
    136. 

  136.      <xs:complexType name="stringDataType">
    137. 

  137.           <xs:sequence>
    138. 

  138.                <xs:choice>
    139. 

  139.                     <xs:element name="PlainValue" type="xs:string"/>
    140. 

  140.                     <xs:element name="EncryptedValue"
    141. 

  141.                          type="xenc:EncryptedDataType"/>
    142. 

  142.                </xs:choice>
    143. 

  143.                <xs:element name="ValueMAC"
    144. 

  144.                     type="xs:base64Binary" minOccurs="0"/>
    145. 

  145.           </xs:sequence>
    146. 

  146.      </xs:complexType>
    147. 

  147.      <xs:complexType name="longDataType">
    148. 

  148.           <xs:sequence>
    149. 

  149.                <xs:choice>
    150. 

  150.                     <xs:element name="PlainValue" type="xs:long"/>
    151. 

  151.                     <xs:element name="EncryptedValue"
    152. 

  152.                          type="xenc:EncryptedDataType"/>
    153. 

  153.                </xs:choice>
    154. 

  154.                <xs:element name="ValueMAC"
    155. 

  155.                     type="xs:base64Binary" minOccurs="0"/>
    156. 

  156.           </xs:sequence>
    157. 

  157.      </xs:complexType>
    158. 

  158.      <xs:complexType name="PINPolicyType">
    159. 

  159.           <xs:attribute name="PINKeyId"
    160. 

  160.                type="xs:string" use="optional"/>
    161. 

  161.           <xs:attribute name="PINUsageMode"
    162. 

  162.                type="pskc:PINUsageModeType"/>
    163. 

  163.           <xs:attribute name="MaxFailedAttempts"
    164. 

  164.                type="xs:unsignedInt" use="optional"/>
    165. 

  165.           <xs:attribute name="MinLength"
    166. 

  166.                type="xs:unsignedInt" use="optional"/>
    167. 

  167.           <xs:attribute name="MaxLength"
    168. 

  168.                type="xs:unsignedInt" use="optional"/>
    169. 

  169.           <xs:attribute name="PINEncoding"
    170. 

  170.                type="pskc:ValueFormatType" use="optional"/>
    171. 

  171.           <xs:anyAttribute namespace="##other"/>
    172. 

  172.      </xs:complexType>
    173. 

  173.      <xs:simpleType name="PINUsageModeType">
    174. 

  174.           <xs:restriction base="xs:string">
    175. 

  175.                <xs:enumeration value="Local"/>
    176. 

  176.                <xs:enumeration value="Prepend"/>
    177. 

  177.                <xs:enumeration value="Append"/>
    178. 

  178.                <xs:enumeration value="Algorithmic"/>
    179. 

  179.           </xs:restriction>
    180. 

  180.      </xs:simpleType>
    181. 

  181.      <xs:simpleType name="KeyUsageType">
    182. 

  182.           <xs:restriction base="xs:string">
    183. 

  183.                <xs:enumeration value="OTP"/>
    184. 

  184.                <xs:enumeration value="CR"/>
    185. 

  185.                <xs:enumeration value="Encrypt"/>
    186. 

  186.                <xs:enumeration value="Integrity"/>
    187. 

  187.                <xs:enumeration value="Verify"/>
    188. 

  188.                <xs:enumeration value="Unlock"/>
    189. 

  189.                <xs:enumeration value="Decrypt"/>
    190. 

  190.                <xs:enumeration value="KeyWrap"/>
    191. 

  191.                <xs:enumeration value="Unwrap"/>
    192. 

  192.                <xs:enumeration value="Derive"/>
    193. 

  193.                <xs:enumeration value="Generate"/>
    194. 

  194.           </xs:restriction>
    195. 

  195.      </xs:simpleType>
    196. 

  196.      <xs:complexType name="DeviceInfoType">
    197. 

  197.           <xs:sequence>
    198. 

  198.                <xs:element name="Manufacturer"
    199. 

  199.                     type="xs:string" minOccurs="0"/>
    200. 

  200.                <xs:element name="SerialNo"
    201. 

  201.                     type="xs:string" minOccurs="0"/>
    202. 

  202.                <xs:element name="Model"
    203. 

  203.                     type="xs:string" minOccurs="0"/>
    204. 

  204.                <xs:element name="IssueNo"
    205. 

  205.                     type="xs:string" minOccurs="0"/>
    206. 

  206.                <xs:element name="DeviceBinding"
    207. 

  207.                     type="xs:string" minOccurs="0"/>
    208. 

  208.                <xs:element name="StartDate"
    209. 

  209.                     type="xs:dateTime" minOccurs="0"/>
    210. 

  210.                <xs:element name="ExpiryDate"
    211. 

  211.                     type="xs:dateTime" minOccurs="0"/>
    212. 

  212.                <xs:element name="UserId"
    213. 

  213.                     type="xs:string" minOccurs="0"/>
    214. 

  214.                <xs:element name="Extensions"
    215. 

  215.                     type="pskc:ExtensionsType" minOccurs="0"
    216. 

  216.                     maxOccurs="unbounded"/>
    217. 

  217.           </xs:sequence>
    218. 

  218.      </xs:complexType>
    219. 

  219.      <xs:complexType name="CryptoModuleInfoType">
    220. 

  220.           <xs:sequence>
    221. 

  221.                <xs:element name="Id" type="xs:string"/>
    222. 

  222.                <xs:element name="Extensions"
    223. 

  223.                     type="pskc:ExtensionsType" minOccurs="0"
    224. 

  224.                     maxOccurs="unbounded"/>
    225. 

  225.           </xs:sequence>
    226. 

  226.      </xs:complexType>
    227. 

  227.      <xs:complexType name="KeyPackageType">
    228. 

  228.           <xs:sequence>
    229. 

  229.                <xs:element name="DeviceInfo"
    230. 

  230.                     type="pskc:DeviceInfoType" minOccurs="0"/>
    231. 

  231.                <xs:element name="CryptoModuleInfo"
    232. 

  232.                     type="pskc:CryptoModuleInfoType" minOccurs="0"/>
    233. 

  233.                <xs:element name="Key"
    234. 

  234.                     type="pskc:KeyType" minOccurs="0"/>
    235. 

  235.                <xs:element name="Extensions"
    236. 

  236.                     type="pskc:ExtensionsType" minOccurs="0"
    237. 

  237.                     maxOccurs="unbounded"/>
    238. 

  238.           </xs:sequence>
    239. 

  239.      </xs:complexType>
    240. 

  240.      <xs:complexType name="AlgorithmParametersType">
    241. 

  241.           <xs:sequence>
    242. 

  242.                <xs:element name="Suite" type="xs:string" minOccurs="0"/>
    243. 

  243.                <xs:element name="ChallengeFormat" minOccurs="0">
    244. 

  244.                     <xs:complexType>
    245. 

  245.                          <xs:attribute name="Encoding"
    246. 

  246.                               type="pskc:ValueFormatType"
    247. 

  247.                                                       use="required"/>
    248. 

  248.                          <xs:attribute name="Min"
    249. 

  249.                               type="xs:unsignedInt" use="required"/>
    250. 

  250.                          <xs:attribute name="Max"
    251. 

  251.                               type="xs:unsignedInt" use="required"/>
    252. 

  252.                          <xs:attribute name="CheckDigits"
    253. 

  253.                               type="xs:boolean" default="false"/>
    254. 

  254.                     </xs:complexType>
    255. 

  255.                </xs:element>
    256. 

  256.                <xs:element name="ResponseFormat" minOccurs="0">
    257. 

  257.                     <xs:complexType>
    258. 

  258.                          <xs:attribute name="Encoding"
    259. 

  259.                               type="pskc:ValueFormatType"
    260. 

  260.                                                       use="required"/>
    261. 

  261.                          <xs:attribute name="Length"
    262. 

  262.                               type="xs:unsignedInt" use="required"/>
    263. 

  263.                          <xs:attribute name="CheckDigits"
    264. 

  264.                               type="xs:boolean" default="false"/>
    265. 

  265.                     </xs:complexType>
    266. 

  266.                </xs:element>
    267. 

  267.                <xs:element name="Extensions"
    268. 

  268.                     type="pskc:ExtensionsType" minOccurs="0"
    269. 

  269.                     maxOccurs="unbounded"/>
    270. 

  270.           </xs:sequence>
    271. 

  271.      </xs:complexType>
    272. 

  272.      <xs:complexType name="ExtensionsType">
    273. 

  273.           <xs:sequence>
    274. 

  274.                <xs:any namespace="##other"
    275. 

  275.                     processContents="lax" maxOccurs="unbounded"/>
    276. 

  276.           </xs:sequence>
    277. 

  277.           <xs:attribute name="definition"
    278. 

  278.                type="xs:anyURI" use="optional"/>
    279. 

  279.      </xs:complexType>
    280. 

  280.      <xs:simpleType name="KeyAlgorithmType">
    281. 

  281.           <xs:restriction base="xs:anyURI"/>
    282. 

  282.      </xs:simpleType>
    283. 

  283.      <xs:simpleType name="ValueFormatType">
    284. 

  284.           <xs:restriction base="xs:string">
    285. 

  285.                <xs:enumeration value="DECIMAL"/>
    286. 

  286.                <xs:enumeration value="HEXADECIMAL"/>
    287. 

  287.                <xs:enumeration value="ALPHANUMERIC"/>
    288. 

  288.                <xs:enumeration value="BASE64"/>
    289. 

  289.                <xs:enumeration value="BINARY"/>
    290. 

  290.           </xs:restriction>
    291. 

  291.      </xs:simpleType>
    292. 

  292.      <xs:complexType name="MACMethodType">
    293. 

  293.            <xs:sequence>
    294. 

  294.                   <xs:choice>
    295. 

  295.                         <xs:element name="MACKey"
    296. 

  296.               type="xenc:EncryptedDataType" minOccurs="0"/>
    297. 

  297.                         <xs:element name="MACKeyReference"
    298. 

  298.                                 type="xs:string" minOccurs="0"/>
    299. 

  299.                         </xs:choice>
    300. 

  300.                         <xs:any namespace="##other"
    301. 

  301.            processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
    302. 

  302.        </xs:sequence>
    303. 

  303.        <xs:attribute name="Algorithm" type="xs:anyURI" use="required"/>
    304. 

  304.         </xs:complexType>
    305. 

  305.      <xs:element name="KeyContainer"
    306. 

  306.           type="pskc:KeyContainerType"/>
    307. 

  307. </xs:schema>
    308. 

  308.