sdmFileReadKey

property Authorized Only

SDM File Read Key

K_SDMFileRead of the carrier bound to the event's identifier, sealed (enc:a256gcm:<kid>:...). Derives the session MAC key that verifies the mirrored CMAC. The event that carries it is the key record; a verifier takes the youngest.

URI:https://ref.openepcis.org/extensions/common/carrier/sdmFileReadKey

Range

xsd:string

Where used

In example documents (1)

EPCIS 2.0 events

References

Access Level

K_SDMFileRead is a secret key; whoever holds it can forge the SUN MAC. Sealed in the event, readable only by the verifier that holds the wrapping key.

JSON-LD Example

{
  "type": "Thing",
  "sdmFileReadKey": "..."
}