BarcodeHeader

Module Info

Reference: BarcodeHeader
Numeric OID: 1.3.6.1.4.1.17218.1.0.1.3.0

Exports

This module explicitly exports the following symbols:

BarcodeHeader

Imports

Assignments

BarcodeHeader

The basic entry point of the barcode.

SEQUENCE

This sequence contains the following fields:

format

This field SHALL be set to the byte string U3. This results in the version 3 header being prefixed with U3 at the start, allowing identification of this format of barcode header.

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 2

contents

SEQUENCE

This sequence contains the following fields:

level2Data: Level2Data
level2Signature Optional: If the the BarcodeData.level2PublicKey field is unset, and this field is set, the barcode is invalid. If the the BarcodeData.level2PublicKey field is set, and this field is unset, the barcode is invalid. The signature is calculated over the CUPER encoding of Level2Data.

Signature

Level2Data

SEQUENCE

This sequence contains the following fields:

level1Data

Level1Data

data Optional

Dynamic Content Data goes here.

SEQUENCE OF

This type is constrained in the following way:

Size

The length of the value must be greater than or equal to: 1

The length of the value must be less than or equal to: 8

Data

This type is concretely parameterised with the following:

ElementSet: Level2DataElements

This type is constrained in the following way:

Fields

The type must satisfy the following field constraints, other fields are unconstrained:

Field	Presence	Value
format	No stipulation	Inverse Any value, except any satisfying the following: Union Any of the following can be true: Single value The value must be exactly: `!I` OR Single value The value must be exactly: `!C` OR Single value The value must be exactly: `!P`

Level1Data

CHOICE

The value of this choice may be one of the following:

unsigned

Only permitted where no security is required. In this case, BarcodeData.level2PublicKey MUST be unset.

BarcodeData

standardSigned

SEQUENCE

This sequence contains the following fields:

keyReference: CompanyKeyReference
data: BarcodeData
signature: Signature calculated over the CUPER encoding of BarcodeTBSData.

Signature

messageRecoverySigned

SEQUENCE

This sequence contains the following fields:

keyReference: CompanyKeyReference
data: Signed content is BarcodeData.

MessageRecoverySignature

subIssued

SEQUENCE

This sequence contains the following fields:

certificate: EndEntityCertificate
data: Signed content is BarcodeData.

MessageRecoverySignature

BarcodeTBSData

SEQUENCE

This sequence contains the following fields:

keyReference: CompanyKeyReference
data: BarcodeData

CompanyKeyReference

Provider of the level 1 signature.

SEQUENCE

This sequence contains the following fields:

securityProvider: CompanyCode
keyId: INTEGER
This type is constrained in the following way:

Range

The value must be greater than or equal to: 0

The value must be less than or equal to: 99999

Signature

Values taken from the IANA JSON Web Signature and Encryption Algorithm registry.

CHOICE

The value of this choice may be one of the following:

es256

ECDSA using the NIST P-256 curve and SHA-256.

DSSSignature

This type is concretely parameterised with the following:

len: 32

es256k

ECDSA using the secp256k1 curve and SHA-256.

DSSSignature

This type is concretely parameterised with the following:

len: 32

es384

ECDSA using the NIST P-384 curve and SHA-384.

DSSSignature

This type is concretely parameterised with the following:

len: 48

es512

ECDSA using the NIST P-521 curve and SHA-512.

DSSSignature

This type is concretely parameterised with the following:

len: 66

ed25519

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 64

ed448

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 114

hs256

HMAC using SHA-256, not permitted except by bilateral agreement.

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 32

hs384

HMAC using SHA-384, not permitted except by bilateral agreement.

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 48

hs512

HMAC using SHA-512, not permitted except by bilateral agreement.

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 64

dsa1

DSA-1024 using SHA-1, not recommended for new deployments.

DSSSignature

This type is concretely parameterised with the following:

len: 20

dsa224

DSA-2048 using SHA-224, not recommended for new deployments.

DSSSignature

This type is concretely parameterised with the following:

len: 32

dsa256

DSA-2048 using SHA-256, not recommended for new deployments.

DSSSignature

This type is concretely parameterised with the following:

len: 32

reserved1

Space for future signature modes, e.g. Post-Quantum Cryptography.

NULL

reserved2

Space for future signature modes, e.g. Post-Quantum Cryptography.

NULL

reserved3

Space for future signature modes, e.g. Post-Quantum Cryptography.

NULL

other

SEQUENCE

This sequence contains the following fields:

algId: OBJECT IDENTIFIER
signature: OCTET STRING

DSSSignature

Parameterised

A generic container for the conveyance of Digital Signature Scheme signatures, e.g. ECDSA and DSA.

This assignment is parameterised, accepting the following parameters:

len: The length, in bytes, of each of r and s. That is, half the total signature length.

INTEGER

SEQUENCE

This sequence contains the following fields:

r: OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: Parameter len
s: OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: Parameter len

MessageRecoverySignature

CHOICE

The value of this choice may be one of the following:

es256

NIST P-256 curve and SHA-256.

ECKNRSignature

This type is concretely parameterised with the following:

len: 32

es256k

secp256k1 curve and SHA-256.

ECKNRSignature

This type is concretely parameterised with the following:

len: 32

es384

NIST P-384 curve and SHA-384.

ECKNRSignature

This type is concretely parameterised with the following:

len: 48

es512

NIST P-521 curve and SHA-512.

ECKNRSignature

This type is concretely parameterised with the following:

len: 66

ECKNRSignature

Parameterised

Message recovery signature as per ISO/IEC 9796-3:2006 Sec. 13 (ECKNR).

This assignment is parameterised, accepting the following parameters:

len: The length, in bytes, of each of r and s. That is, half the total signature length.

INTEGER

SEQUENCE

This sequence contains the following fields:

r: OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: Parameter len
s: OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: Parameter len
remainder: OCTET STRING

PublicKey

CHOICE

The value of this choice may be one of the following:

nistP256

ECPublicKey

This type is concretely parameterised with the following:

len: 32

secp256K1

ECPublicKey

This type is concretely parameterised with the following:

len: 32

nistP384

ECPublicKey

This type is concretely parameterised with the following:

len: 48

nistP521

ECPublicKey

This type is concretely parameterised with the following:

len: 66

ed25519

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 32

ed448

OCTET STRING

This type is constrained in the following way:

Size

The length of the value must exactly: 57

reserved

Space for future public key formats, e.g. Post-Quantum Cryptography.

NULL

other

DER encoded SubjectPublicKeyInfo.

OCTET STRING

ECPublicKey

Parameterised

This assignment is parameterised, accepting the following parameters:

len: The length, in bytes, required to represent the x coördinate on a curve.

INTEGER

SEQUENCE

This sequence contains the following fields:

x: OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: Parameter len
yIsOdd: BOOLEAN

EndEntityCertificate

SEQUENCE

This sequence contains the following fields:

serial

INTEGER

This type is constrained in the following way:

Range

The value must be greater than or equal to: 1

The value must be less than or equal to: 16777216

issuer

CompanyKeyReference

validUntilYear

INTEGER

This type is constrained in the following way:

Range

The value must be greater than or equal to: 2026

The value must be less than or equal to: 2279

validUntilDay

INTEGER

This type is constrained in the following way:

Range

The value must be greater than or equal to: 1

The value must be less than or equal to: 366

subjectPublicKey

The public key MUST be of the same EC curve as the issuing certificate's public key. If it is not the certificate MUST be treated as invalid. This public key is calculated as per SEC 4.

CHOICE

The value of this choice may be one of the following:

nistP256

ECPublicKey

This type is concretely parameterised with the following:

len: 32

secp256K1

ECPublicKey

This type is concretely parameterised with the following:

len: 32

nistP384

ECPublicKey

This type is concretely parameterised with the following:

len: 48

nistP521

ECPublicKey

This type is concretely parameterised with the following:

len: 66

extensions

SEQUENCE OF CertificateExtension

This type is constrained in the following way:

Size

The length of the value must be greater than or equal to: 0

The length of the value must be less than or equal to: 15

CertificateExtension

SEQUENCE

This sequence contains the following fields:

extension

Data

This type is concretely parameterised with the following:

ElementSet: CertificateExtensions

This type is constrained in the following way:

Fields

The type must satisfy the following field constraints, other fields are unconstrained:

Field	Presence	Value
format	No stipulation	Inverse Any value, except any satisfying the following: Union Any of the following can be true: Single value The value must be exactly: `!I` OR Single value The value must be exactly: `!C` OR Single value The value must be exactly: `!P`

critical

If the extension format is not recognised, or can't be processed, and it is marked critical, the certificate MUST be treated as invalid; otherwise, it is permitted to ignore extensions not understood.

BOOLEAN

CertificateExtensions

OBJECT SET

This object set has the following members:

&id	&Type	&encoding
Other members may be added at runtime.

BarcodeData

SEQUENCE

This sequence contains the following fields:

data

This field MUST contain at most one well-known UIC data type (e.g. FCBn).

SEQUENCE OF

This type is constrained in the following way:

Size

The length of the value must be greater than or equal to: 1

The length of the value must be less than or equal to: 16

Data

This type is concretely parameterised with the following:

ElementSet: Level1DataElements

This type is constrained in the following way:

Fields

The type must satisfy the following field constraints, other fields are unconstrained:

Field	Presence	Value
format	No stipulation	Inverse Any value, except any satisfying the following: Union Any of the following can be true: Single value The value must be exactly: `!I` OR Single value The value must be exactly: `!C` OR Single value The value must be exactly: `!P`

level2PublicKey Optional

PublicKey

endOfValidity Optional

End of the validity of the barcode. After this date and time the barcode needs to be regenerated by the provider of the ticket. The provider of the bar code MUST ensure that the endOfValidity given here does not exceed the validity of the key pair used on level 2.

Timestamp

validityDuration Optional

Validity duration in seconds of the barcode with reference to the time stamp in the dynamic content data.

INTEGER

This type is constrained in the following way:

Range

The value must be greater than or equal to: 1

The value must be less than or equal to: 3600

Level1DataElements

OBJECT SET

This object set has the following members:

&id	&Type	&encoding
`MMT1`	MultiModalTicket	cuperEncoding
`FPD1`	FixedPoint	cuperEncoding
`FCB3`	UicRailTicketData	cuperEncoding
`FCB2`	UicRailTicketData	cuperEncoding
`FCB13`	UicRailTicketData	cuperEncoding
Other members may be added at runtime.

Level2DataElements

OBJECT SET

This object set has the following members:

&id	&Type	&encoding
`FDC2`	DynamicContent	cuperEncoding
`FDC1`	UicDynamicContentData	cuperEncoding
Other members may be added at runtime.

/**
* UIC barcode header - version 3.0.0
*
* ## Encoding conventions
* A barcode which is only static, and for which the security is in the system (e.g. security paper), does not need a signature.
* A barcode which is only static, and includes its own security, needs a level 1 signature and a corresponding key reference.
* A dynamic barcode including static and dynamic signatures needs the same elements as a static barcode, plus a level 2 signature.
*
* The maximum size of a barcode is, per the Aztec specification ISO 24778, limited to 1914 bytes.
*/
BarcodeHeader { iso(1) identified-organization(3) dod(6)
    internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) header(1) v3(3) 0 }
    DEFINITIONS AUTOMATIC TAGS ::= BEGIN

EXPORTS BarcodeHeader;

IMPORTS CompanyCode, Timestamp, DataFormatIdentifier, Data, DATA-ELEMENT
 FROM GeneralData { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) general(5) v1(1) 0 }
 multiModalTicketData
 FROM MultiModalTicketData { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) mmtd(4) v1(1) 0 }
 dynamicContentData
 FROM DynamicContentData { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) dcd(3) v2(2) 0 }
 fixedPointData
 FROM FixedPointData { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) fpd(6) v1(1) 0 }
 uicRailTicketData
 FROM RailTicketDataV3 { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) rtd(2) v3(3) 7 }
 uicRailTicketData
 FROM RailTicketDataV2 { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) rtd(2) v2(2) 3 }
 uicRailTicketData
 FROM RailTicketDataV1 { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) rtd(2) v1-3(1) 5 }
 uicDynamicContentData
 FROM DynamicContentDataV1 { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) modules(0) dcd(3) v1(1) 5 };

/**
* The basic entry point of the barcode.
*/
BarcodeHeader ::= SEQUENCE {
    /**
    * This field **SHALL** be set to the byte string `U3`.
    * This results in the version 3 header being prefixed with U3 at the start, allowing identification of this
    *  format of barcode header.
    */
    format      OCTET STRING (SIZE(2)),
    contents    SEQUENCE {
        level2Data      Level2Data,
        /**
        * If the the `BarcodeData.level2PublicKey` field is unset, and this field is set, the barcode is invalid.
        * If the the `BarcodeData.level2PublicKey` field is set, and this field is unset, the barcode is invalid.
        * The signature is calculated over the CUPER encoding of `Level2Data`.
        */
        level2Signature Signature OPTIONAL
    }
}

Level2Data ::= SEQUENCE {
    level1Data  Level1Data,
    /**
    * Dynamic Content Data goes here.
    */
    data  SEQUENCE (SIZE(1..8)) OF Data{Level2DataElements} (WITH COMPONENTS {
        ...,
        format (ALL EXCEPT ("!I" | "!C" | "!P"))
    }) OPTIONAL
}

Level1Data ::= CHOICE {
    /**
    * Only permitted where no security is required.
    * In this case, `BarcodeData.level2PublicKey` **MUST** be unset.
    */
    unsigned                BarcodeData,
    standardSigned          SEQUENCE {
        keyReference    CompanyKeyReference,
        data            BarcodeData,
        /**
        * Signature calculated over the CUPER encoding of `BarcodeTBSData`.
        */
        signature       Signature
    },
    messageRecoverySigned   SEQUENCE {
        keyReference    CompanyKeyReference,
        /**
        * Signed content is `BarcodeData`.
        */
        data            MessageRecoverySignature
    },
    subIssued               SEQUENCE {
        certificate     EndEntityCertificate,
        /**
        * Signed content is `BarcodeData`.
        */
        data            MessageRecoverySignature
    }
}

BarcodeTBSData ::= SEQUENCE {
    keyReference    CompanyKeyReference,
    data            BarcodeData
}

/**
* Provider of the level 1 signature.
*/
CompanyKeyReference ::= SEQUENCE {
    securityProvider    CompanyCode,
    keyId               INTEGER (0..99999)
}

/**
* Values taken from the IANA [JSON Web Signature and Encryption Algorithm registry](https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms).
*/
Signature ::= CHOICE {
    /**
    * ECDSA using the NIST P-256 curve and SHA-256.
    */
    es256       DSSSignature{32},
    /**
    * ECDSA using the secp256k1 curve and SHA-256.
    */
    es256k      DSSSignature{32},
    /**
    * ECDSA using the NIST P-384 curve and SHA-384.
    */
    es384       DSSSignature{48},
    /**
    * ECDSA using the NIST P-521 curve and SHA-512.
    */
    es512       DSSSignature{66},
    ed25519     OCTET STRING (SIZE (64)),
    ed448       OCTET STRING (SIZE (114)),
    /**
    * HMAC using SHA-256, not permitted except by bilateral agreement.
    */
    hs256       OCTET STRING (SIZE (32)),
    /**
    * HMAC using SHA-384, not permitted except by bilateral agreement.
    */
    hs384       OCTET STRING (SIZE (48)),
    /**
    * HMAC using SHA-512, not permitted except by bilateral agreement.
    */
    hs512       OCTET STRING (SIZE (64)),
    /**
    * DSA-1024 using SHA-1, not recommended for new deployments.
    */
    dsa1        DSSSignature{20},
    /**
    * DSA-2048 using SHA-224, not recommended for new deployments.
    */
    dsa224      DSSSignature{32},
    /**
    * DSA-2048 using SHA-256, not recommended for new deployments.
    */
    dsa256      DSSSignature{32},
    /**
    * Space for future signature modes, e.g. Post-Quantum Cryptography.
    */
    reserved1   NULL,
    /**
    * Space for future signature modes, e.g. Post-Quantum Cryptography.
    */
    reserved2   NULL,
    /**
    * Space for future signature modes, e.g. Post-Quantum Cryptography.
    */
    reserved3   NULL,
    other       SEQUENCE {
        algId       OBJECT IDENTIFIER,
        signature   OCTET STRING
    }
}

/**
* A generic container for the conveyance of Digital Signature Scheme signatures, e.g. ECDSA and DSA.
* @len The length, in bytes, of each of `r` and `s`. That is, half the total signature length.
*/
DSSSignature{INTEGER: len} ::= SEQUENCE {
    r OCTET STRING (SIZE(len)),
    s OCTET STRING (SIZE(len))
}

MessageRecoverySignature ::= CHOICE {
    /**
    * NIST P-256 curve and SHA-256.
    */
    es256   ECKNRSignature{32},
    /**
    * secp256k1 curve and SHA-256.
    */
    es256k  ECKNRSignature{32},
    /**
    * NIST P-384 curve and SHA-384.
    */
    es384   ECKNRSignature{48},
    /**
    * NIST P-521 curve and SHA-512.
    */
    es512   ECKNRSignature{66}
}

/**
* Message recovery signature as per ISO/IEC 9796-3:2006 Sec. 13 (ECKNR).
* @len The length, in bytes, of each of `r` and `s`. That is, half the total signature length.
*/
ECKNRSignature{INTEGER: len} ::= SEQUENCE {
    r OCTET STRING (SIZE(len)),
    s OCTET STRING (SIZE(len)),
    remainder OCTET STRING
}

PublicKey ::= CHOICE {
    nistP256    ECPublicKey{32},
    secp256K1   ECPublicKey{32},
    nistP384    ECPublicKey{48},
    nistP521    ECPublicKey{66},
    ed25519     OCTET STRING (SIZE (32)),
    ed448       OCTET STRING (SIZE (57)),
    /**
    * Space for future public key formats, e.g. Post-Quantum Cryptography.
    */
    reserved    NULL,
    /**
    * DER encoded SubjectPublicKeyInfo.
    */
    other       OCTET STRING
}

/**
* @len The length, in bytes, required to represent the x coördinate on a curve.
*/
ECPublicKey{INTEGER: len} ::= SEQUENCE {
    x OCTET STRING (SIZE(len)),
    yIsOdd BOOLEAN
}

EndEntityCertificate ::= SEQUENCE {
    serial INTEGER (1..16777216),
    issuer CompanyKeyReference,
    validUntilYear INTEGER (2026..2279),
    validUntilDay INTEGER (1..366),
    /**
    * The public key **MUST** be of the same EC curve as the issuing certificate's public key.
    * If it is not the certificate **MUST** be treated as invalid.
    * This public key is calculated as per [SEC 4](https://www.secg.org/sec4-1.0.pdf).
    */
    subjectPublicKey CHOICE {
        nistP256    ECPublicKey{32},
        secp256K1   ECPublicKey{32},
        nistP384    ECPublicKey{48},
        nistP521    ECPublicKey{66}
    },
    extensions SEQUENCE OF CertificateExtension (SIZE(0..15))
}

CertificateExtension ::= SEQUENCE {
    extension   Data{CertificateExtensions} (WITH COMPONENTS {
        ...,
        format (ALL EXCEPT ("!I" | "!C" | "!P"))
    }),
    /**
    * If the extension format is not recognised, or can't be processed, and it is marked critical, the certificate **MUST** be treated as invalid;
    * otherwise, it is permitted to ignore extensions not understood.
    */
    critical    BOOLEAN
}

CertificateExtensions DATA-ELEMENT ::= { ... }

BarcodeData ::= SEQUENCE {
    /**
    * This field MUST contain at most one well-known UIC data type (e.g. `FCBn`).
    */
    data                SEQUENCE SIZE(1..16) OF Data{Level1DataElements} (WITH COMPONENTS {
        ...,
        format (ALL EXCEPT ("!I" | "!C" | "!P"))
    }),
    level2PublicKey     PublicKey                       OPTIONAL,
    /**
    * End of the validity of the barcode.
    * After this date and time the barcode needs to be regenerated by the provider of the ticket.
    * The provider of the bar code **MUST** ensure that the endOfValidity given here does not exceed the validity of the key pair used on level 2.
    */
    endOfValidity       Timestamp                       OPTIONAL,
    /**
    * Validity duration in seconds of the barcode with reference to the time stamp in the dynamic content data.
    */
   	validityDuration    INTEGER (1..3600)               OPTIONAL,
   	...
}

Level1DataElements DATA-ELEMENT ::= {
    multiModalTicketData |
    fixedPointData |
    RailTicketDataV3.uicRailTicketData |
    RailTicketDataV2.uicRailTicketData |
    RailTicketDataV1.uicRailTicketData,
    ...
}

Level2DataElements DATA-ELEMENT ::= {
 dynamicContentData |
 DynamicContentDataV1.uicDynamicContentData,
 ...
}

END

Module Info

Exports

Imports

From GeneralData

From MultiModalTicketData

From DynamicContentData

From FixedPointData

From RailTicketDataV3

From RailTicketDataV2

From RailTicketDataV1

From DynamicContentDataV1

Assignments

BarcodeHeader

Size

Level2Data

Size

Fields

Inverse

Union

Single value

Single value

Single value

Level1Data

BarcodeTBSData

CompanyKeyReference

Range

Signature

Size

Size

Size

Size

Size

DSSSignature

Size

Size

MessageRecoverySignature

ECKNRSignature

Size

Size

PublicKey

Size

Size

ECPublicKey

Size

EndEntityCertificate

Range

Range

Range

Size

CertificateExtension

Fields

Inverse

Union

Single value

Single value

Single value

CertificateExtensions

BarcodeData

Size

Fields

Inverse

Union

Single value

Single value

Single value

Range

Level1DataElements

Level2DataElements