| 1 Definition | 2 Functional Requirements | 3 Syntax | 4 Semantics |
1 Definition
The Process Action of a User sending an Authentication Request Item to request that an Information Service:
- Confirm that an Item or Process is what it claims to be.
- Grant Rights to the Authentication Response Item based on requested Rights (Status=Model).
If the request is accepted, the Information Service responds with an Authentication Response Item including Rights (Status=Final).
2 Protocol
The protocol is described using Natural Language by the sequence of action below:
- User sends “Authenticate PA Request including Authentication with Rights (Status=Model)” to Authenticate Service.
- If Authenticate Service is a free service, goto Authenticate.
- If Authenticate Service is a pay service:
- User sends “Authenticate PA Request with Service Pricing Model (Status=Model)” to Authenticate Service.
- Authenticate Service sends “Authenticate PA Response”:
- If “Authenticate PA Response includes Status=Err”, goto End.
- If “Authenticate PA Response includes Status=Ack and Service Pricing Model with Transaction (both Status=Model)”, User
- Transacts “Value included in Transaction”.
- Sends “Authenticate PA Request including Service Pricing Model with Transaction (Status=Final)” to Authenticate Service.
- Authenticate: Authenticate Service sends to User “Authenticate PA Response” including:
- “Service Pricing Model (Status=Final)”, if Authenticate is a pay Service.
- “Authentication and Rights” (Status=Final).
- End
The protocol described using Workflow Description Language (WDL) is available at this link:
https://schemas.mpai.community/MMM4/V2.2/actions/AuthenticatePA.wdl
3 Syntax
The structure of the input and output messages, using JavaScript Object Notation (JSON) is available at this link:
https://schemas.mpai.community/MMM4/V2.2/actions/AuthenticatePA.json
4 Semantics
The semantic of the JSON keys is described in the table below:
| Label | Description |
| Header | Authenticate Process Action Header – Standard “MMM-AUP-Vx.y” |
| MInstanceID | Identifier of M-Instance. |
| MEnvironmentID | Identifier of M-Environment. |
| AuthenticatePAData | Data of the Authenticate PA Item. |
| – Time | Times of PA request emission and PA request execution. |
| – RQ-Complements | Source Complements. |
| – With Authentication | The Authentication Request Item. |
| – With Rights | Requested Rights (Status=Model) on the Authentication Response. |
| – With SPM | Service Pricing Model, if Authenticate is a pay Service. |
| – RS-Complements | Complements in the PA Response. |
| – With Authentication | Authentication Response Item. |
| – With Rights | Rights (Status=Final) based on Model Rights if PA Request is accepted. |
| – With SPM | Service Pricing Model completed by Authenticate Service. |
| – With PAStatus | PA Request Status. |
| – Ack | If PA Request could be performed. |
| – Err | If PA Request could not be performed. |
| – FaultyPA | Faulty PA Request. |
| – IncID | Incorrect ID. |
| – LocOOR | Location out of range. |
| – InsRights | Insufficient Rights. |
| – InsValue | Insufficient Value in Wallet. |
| DataExchangeMetadata | Metadat ensuring correct transfer of information from Source to Destination. |
| Trace | Authentication provenance information and time of PA production. |
| DescMetadata | Descriptive Metadata. |