https://samtrafiken.atlassian.net/wiki/x/gYBTBg

MTS 1

https://bitbucket.org/samtrafiken/bob-mts-1-mobile-ticket-format/src/master/
In MTS 1 you can find information regarding:

• EC (primary) and RSA (fallback) algorithm for issuer and device signature of mobile ticket bundles (MTB). Issuer signature ensures that the requests comes from a trusted participant. Device signatures are used to provide a binding between the mobile ticket and the device (e.g. a mobile phone).

• The structure of the mobile ticket bundle.

• Schemas of security headers of the mobile ticket bundle.

MTS 2

https://bitbucket.org/samtrafiken/bob-mts-2-device-key-derivation/src/master/
In MTS 2 you can find information regarding:

• How a device key, used for device signatures, can be calculated. Device keys are used to provide a binding between the mobile ticket bundle and the device (e.g. a mobile phone). To read about the keys and algorithms see MTS 1.

MTS 3

https://bitbucket.org/samtrafiken/bob-mts-3-coordinated-ticket-namespace/src/master/
In MTS 3 you can find information regarding:

• Coordinated Ticket Name Space, which defines a common set of variables and data structures to be used within the MTB. For example version handling and metadata. To read about MTBs see MTS 1.

• Schemas for version handling, metadata et.c.

MTS 4

https://bitbucket.org/samtrafiken/bob-mts-4-coordination-and-key-management/src/master/
In MTS 4 you can find information regarding:

• Coordination and key management between participants and the administrative body (Samtrafiken).

• Participant metadata set, containing current keys and related metadata, is distributed by Samtrafiken to participants and all participants needs to retrieve this list regular.

• Mandatory fields of the JSON Web Signature (JWS) protected header.

• Schema for the participant metadata set.

MTS 5

https://bitbucket.org/samtrafiken/bob-mts-5-proof-of-possession-authorisation-tokens/src/master/
In MTS 5 you can find information regarding:

• How to generate and validate a proof-of-possession (of private keys) token. Private keys are used to sign critical parts of requests and responses.

• How to validated proof-of-possession tokens.

• Specification of Primary and fallback algorithms.

• Hash calculation and how to verify it.

MTS 6

https://bitbucket.org/samtrafiken/bob-mts-6-tickle/src/master/
In MTS 6 you can find information regarding:

• The generic language Tickle how to write and evaluate conditions for the journey.

• The language is use to define time and spatial geographical conditions including macros (complex conditions saved in the client for less data in messages).

MTS 7

https://bitbucket.org/samtrafiken/bob-mts-7-travel-card-application/src/master/
In MTS 7 you can find information regarding:

• Methods to store a MTB on a chip embedded in a smart card, a wearable or similar.

• Requirements and compliance levels that has to be fulfilled to use this.

• Specific commands to use.

• Complete data structures that is needed.

• Security issues that needs to be considered.

MTS 8

https://bitbucket.org/samtrafiken/bob-mts-8-date-and-time-formats/src/master/
In MTS 8 you can find information regarding:

• Date and time formats used within the mobile ticket specifications and related APIs.

• ISO standards regarding time duration and interval formats.