You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
PCPrincess edited this page Apr 12, 2016
·
3 revisions
Description
The steps required to create the unique website user ID for the current user.
Response Sequence
The app has successfully scanned a QR code and has received the nut
Requirements
WIC-1. The app shall extract the website's domain from the scanned QR code. E.g. www.example.com -> example.com
WIC-2. The app shall use HMAC-SHA256, where the user's IMK is the key and the domain is the message, to create the user's private key for the website.
WIC-3. If the QR code contains the domain extension specifier, name-value pair (?x=...), then the HMAC message in WIC-2 shall contain the next number of characters specified by x. E.g. www.example.com/testing/users?x=8 -> example.com/testing
WIC-4. Using the private key created in WIC-2 a corresponding public key shall be created. This public key is essentially the website's user ID, this is called the idk.
WIC-5. The entire URL, excluding the protocol, is signed with the users private key for that website and transmitted to the resource name indicated in the scanned QR code.