<- Go to Data Types    Go to ToC

1. Definition 2. Functional Requirements 3. Syntax 4. Semantics

1 Definition

Attestation Evidence is a typed collection of evidence items supporting runtime trust decisions. Each evidence item is classified using the Security Evidence Taxonomy (SET).

2 Functional Requirements

Attestation Evidence shall:

  • Include a Header identifying the version of the Attestation Evidence structure.
  • Contain an AttestationEvidenceID uniquely identifying the Attestation Evidence instance.
  • Include AttestationEvidenceTime indicating when the evidence was collected.
  • Contain one or more EvidenceItems.
  • Classify each evidence item using the Security Evidence Taxonomy.
  • Encode each evidence payload in base64url.
  • Optionally include a Signature covering the entire Attestation Evidence object.
  • Include DataXMData and DescrMetadata when required by the application.
  • Use only the keys defined in this Data Type.

3 Syntax

https://schemas.mpai.community/PTF/V1.0/data/.json

4 Semantics

Label Description
Header Attestation Evidence Header – Standard “AIF-API-V”
MInstanceID ID of M-Instance.
AttestationEvidenceID ID of Process Instance
AttestationEvidenceTime Time of evidence collection.
EvidenceItems List of evidence items classified using SET.
EvidenceItems.Type Evidence type identifier from the Security Evidence Taxonomy.
EvidenceItems.Value Opaque evidence payload encoded as base64url.
EvidenceItems.Verifier ID of the component that produced or verified the evidence.
EvidenceItems.HashAlgorithm Optional hash algorithm identifier from the Security Algorithm Taxonomy.
EvidenceItems.HashValue Optional hash of the evidence payload (hex or base64url).
Signature Optional signature over the entire Attestation Evidence object.
Signature.Algorithm Signature algorithm identifier from the Security Algorithm Taxonomy.
Signature.Value Digital signature value encoded as base64url.
DataXMData Metadata that the Process/AIM exchanges with other Process/AIM.
DescrMetadata Descriptive metadata (max length 2048).

<- Go to Data Types    Go to ToC