AuthProfile

class

Carrier Authentication Profile

How a carrier presents itself at a scan: the scheme, the URL parameters it mirrors into, and how its keys derive. Mirrors the tag's file settings so a verifier reads the URL the way the tag writes it.

URI:https://ref.openepcis.org/extensions/common/carrier/AuthProfile

Upstream alignment

How this class and its properties align to external and upstream vocabularies. Open a vocabulary to see the exact term-by-term relationships.

Properties (8)

DescriptionDomainRangeVocabularies
diversification
Key Diversification
What the per-carrier keys derive from under the master key: sgtin (the canonical identifier, keys exist before the tag does) or uid (the chip, AN10922 classic).carrier:AuthProfilexsd:string Restricted—
encParam
Encrypted File Data Parameter
Name of the URL query parameter carrying encrypted file data, when the tag mirrors any.carrier:AuthProfilexsd:string Restricted—
macInput
MAC Input
What the tag MACs besides the session (carrier:MacInput).carrier:AuthProfilecarrier:MacInput Restricted—
macParam
MAC Parameter
Name of the URL query parameter the tag mirrors the truncated SDM MAC into, e.g. cmac.carrier:AuthProfilexsd:string Restricted—
piccEncrypted
PICC Data Encrypted
Whether the PICC data is AES-encrypted with K_SDMMetaRead (true) or mirrored in plain hex (false, not supported by the OpenEPCIS verifier yet).carrier:AuthProfilexsd:boolean Restricted—
piccParam
PICC Data Parameter
Name of the URL query parameter the tag mirrors the (encrypted) PICC data into, e.g. picc.carrier:AuthProfilexsd:string Restricted—
scheme
Scheme
The carrier:AuthScheme of the profile.carrier:AuthProfilecarrier:AuthScheme Restricted—
urlTemplate
URL Template
The NDEF URL as written to the tag, with {gtin}, {serial}, {picc}, {cmac} placeholders, e.g. https://id.epc.is/01/{gtin}/21/{serial}?picc={picc}&cmac={cmac}.carrier:AuthProfilexsd:string Restricted—

Used as Range (1)

JSON-LD Example

{
  "@context": "https://ref.openepcis.org/extensions/common/carrier/carrier-context.jsonld",
  "type": "AuthProfile",
  "diversification": "...",
  "encParam": "...",
  "macInput": "..."
}