From d77acb349d8d216c44333c227bd9eddbe32f9ea4 Mon Sep 17 00:00:00 2001 From: gmandyam Date: Tue, 25 Jul 2017 19:46:40 -0700 Subject: [PATCH 1/7] Update index.bs Biometric Selection Criteria extension --- index.bs | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/index.bs b/index.bs index 22af5f8bf..423c1f043 100644 --- a/index.bs +++ b/index.bs @@ -3093,6 +3093,41 @@ This [=registration extension=] and [=authentication extension=] enables use of 01 -- Subitem 3: CBOR short for Matcher Protection Type Software +## Authenticator Biometric Criteria Extension (authnSel) ## {#sctn-authenticator-selection-extension} + +This [=registration extension=] allows a [=[RP]=] to specify the desired performance of a biometric authenticator +that could be leveraged when creating the credential. + +: Extension identifier +:: `biometricBound` + +: Client extension input +:: Biometric performance bounds: + + + float FAR; + float FRR; + + + The FAR is the maximum false acceptance rate for a biometric authenticator allowed by the [=[RP]=]. + + The FAR is the maximum false rejection rate for a biometric authenticator allowed by the [=[RP]=]. + +: Client extension processing +:: This extension can only be used during {{CredentialsContainer/create()}}. If the client supports the Authenticator Biometric Criteria + Extension and biometric authenticators are available, it MUST use the first available biometric authenticator whose FAR and FRR match the bounds as provided. + +: Client extension output +:: Returns the JSON value `true` to indicate to the RP that the extension was acted upon + +: Authenticator extension input +:: None. + +: Authenticator extension processing +:: None. + +: Authenticator extension output +:: None. # IANA Considerations # {#sctn-IANA} From adf287058fa34827e0668d127e995ee96a23eddb Mon Sep 17 00:00:00 2001 From: gmandyam Date: Tue, 25 Jul 2017 19:53:01 -0700 Subject: [PATCH 2/7] Update index.bs --- index.bs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.bs b/index.bs index 423c1f043..95ca10150 100644 --- a/index.bs +++ b/index.bs @@ -3093,7 +3093,7 @@ This [=registration extension=] and [=authentication extension=] enables use of 01 -- Subitem 3: CBOR short for Matcher Protection Type Software -## Authenticator Biometric Criteria Extension (authnSel) ## {#sctn-authenticator-selection-extension} +## Authenticator Biometric Criteria Extension (biometricBound) ## {#sctn-authenticator-biometric-criteria-extension} This [=registration extension=] allows a [=[RP]=] to specify the desired performance of a biometric authenticator that could be leveraged when creating the credential. From 834062e5dc9046b08ceb6587758763f3475d6abc Mon Sep 17 00:00:00 2001 From: gmandyam Date: Tue, 25 Jul 2017 20:05:29 -0700 Subject: [PATCH 3/7] Update index.bs --- index.bs | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/index.bs b/index.bs index 95ca10150..c7407d257 100644 --- a/index.bs +++ b/index.bs @@ -3104,10 +3104,12 @@ that could be leveraged when creating the credential. : Client extension input :: Biometric performance bounds: - - float FAR; - float FRR; - +
+    dictionary biometricCriteria{
+        float FAR;
+        float FRR;
+        }
+    
The FAR is the maximum false acceptance rate for a biometric authenticator allowed by the [=[RP]=]. From 82e0e41cc3f88efce5e33dbdc66858fc9eba7e9c Mon Sep 17 00:00:00 2001 From: gmandyam Date: Tue, 25 Jul 2017 20:24:44 -0700 Subject: [PATCH 4/7] Update index.bs --- index.bs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.bs b/index.bs index c7407d257..64b064f3c 100644 --- a/index.bs +++ b/index.bs @@ -3108,7 +3108,7 @@ that could be leveraged when creating the credential. dictionary biometricCriteria{ float FAR; float FRR; - } + }; The FAR is the maximum false acceptance rate for a biometric authenticator allowed by the [=[RP]=]. From 8d0c61f05a4ebc8c4aa4f211ec5485db58ab37f6 Mon Sep 17 00:00:00 2001 From: gmandyam Date: Sun, 19 Nov 2017 15:01:17 -0800 Subject: [PATCH 5/7] Update index.bs --- index.bs | 51 ++++++++++++--------------------------------------- 1 file changed, 12 insertions(+), 39 deletions(-) diff --git a/index.bs b/index.bs index 64b064f3c..d35e643c9 100644 --- a/index.bs +++ b/index.bs @@ -2969,7 +2969,7 @@ This [=registration extension=] and [=authentication extension=] enables use of ## Location Extension (loc) ## {#sctn-location-extension} The location [=registration extension=] and [=authentication extension=] provides the client device's current location to the -WebAuthn [=[RP]=]. +WebAuthn [=[RP]=]. : Extension identifier :: `loc` @@ -3000,6 +3000,17 @@ WebAuthn [=[RP]=]. {longitude, latitude, altitude} triplet, following the coordinate representation defined in [The W3C Geolocation API Specification](https://dev.w3.org/geo/api/spec-source.html#coordinates_interface). + A descrption in CDDL follows: +
+      {
+       loc: positionCoordinates,
+      }    
+      positionCoordinates = [
+         latitude: float64,
+         longitude: float64,
+         altitude: float64
+         ]
+    
         ...                                         -- [=RP ID=] hash (32 bytes)
         81                                          -- TUP and ED set
@@ -3093,44 +3104,6 @@ This [=registration extension=] and [=authentication extension=] enables use of
                     01           -- Subitem 3: CBOR short for Matcher Protection Type Software
     
-## Authenticator Biometric Criteria Extension (biometricBound) ## {#sctn-authenticator-biometric-criteria-extension} - -This [=registration extension=] allows a [=[RP]=] to specify the desired performance of a biometric authenticator -that could be leveraged when creating the credential. - -: Extension identifier -:: `biometricBound` - -: Client extension input -:: Biometric performance bounds: - -
-    dictionary biometricCriteria{
-        float FAR;
-        float FRR;
-        };
-    
- - The FAR is the maximum false acceptance rate for a biometric authenticator allowed by the [=[RP]=]. - - The FAR is the maximum false rejection rate for a biometric authenticator allowed by the [=[RP]=]. - -: Client extension processing -:: This extension can only be used during {{CredentialsContainer/create()}}. If the client supports the Authenticator Biometric Criteria - Extension and biometric authenticators are available, it MUST use the first available biometric authenticator whose FAR and FRR match the bounds as provided. - -: Client extension output -:: Returns the JSON value `true` to indicate to the RP that the extension was acted upon - -: Authenticator extension input -:: None. - -: Authenticator extension processing -:: None. - -: Authenticator extension output -:: None. - # IANA Considerations # {#sctn-IANA} ## WebAuthn Attestation Statement Format Identifier Registrations ## {#sctn-att-fmt-reg} From 14672723a1577508c0a5ef42c0aabedc40789e80 Mon Sep 17 00:00:00 2001 From: gmandyam Date: Sun, 19 Nov 2017 16:03:52 -0800 Subject: [PATCH 6/7] Update index.bs --- index.bs | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/index.bs b/index.bs index d35e643c9..fcab88db8 100644 --- a/index.bs +++ b/index.bs @@ -3000,8 +3000,8 @@ WebAuthn [=[RP]=]. {longitude, latitude, altitude} triplet, following the coordinate representation defined in [The W3C Geolocation API Specification](https://dev.w3.org/geo/api/spec-source.html#coordinates_interface). - A descrption in CDDL follows:
+    CDDL:
       {
        loc: positionCoordinates,
       }    
@@ -3010,8 +3010,7 @@ WebAuthn [=[RP]=].
          longitude: float64,
          altitude: float64
          ]
-    
-
+     CBOR Example:
         ...                                         -- [=RP ID=] hash (32 bytes)
         81                                          -- TUP and ED set
         00 00 00 01                                 -- (initial) signature counter

From 90f0476b0a8da42324b50cafcb159588fecac3ef Mon Sep 17 00:00:00 2001
From: gmandyam 
Date: Mon, 20 Nov 2017 19:51:51 -0800
Subject: [PATCH 7/7] Update index.bs

---
 index.bs | 2 --
 1 file changed, 2 deletions(-)

diff --git a/index.bs b/index.bs
index fcab88db8..146e9b89e 100644
--- a/index.bs
+++ b/index.bs
@@ -50,7 +50,6 @@ spec: ECMAScript; urlPrefix: https://tc39.github.io/ecma262/#
         text: %ArrayBuffer%; url: sec-arraybuffer-constructor
         text: internal slot; url: sec-object-internal-methods-and-internal-slots
 
-
 spec: HTML52; urlPrefix: https://w3c.github.io/html/
     type: dfn
         urlPrefix: browsers.html
@@ -71,7 +70,6 @@ spec: WebCryptoAPI; urlPrefix: https://www.w3.org/TR/WebCryptoAPI/
     type: dictionary
         text: AlgorithmIdentifier; url: dfn-AlgorithmIdentifier
 
-
 spec: CREDENTIAL-MANAGEMENT-1; urlPrefix: https://w3c.github.io/webappsec-credential-management/
     type: dictionary
         text: CredentialCreationOptions; url: dictdef-credentialcreationoptions