...
As the Metadata constitutes the very foundation for interoperability, it is of particular security-critical nature. For this reason, all Metadata (wether being the complete set or an excerpt) it is cryptographically signed by the Coordination Function. Any requests to add, modify or remove metadata also required cryptographically signed operations. For this cryptography to work, there needs to be an initial key exchange between the participant and Samtrafiken. What mechanisms are available for this key exchange is published at https://bob.samtrafiken.se
3.6 Authentication Service
...