<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p>Hello,</p>
    <p>In my understanding, UQ has been designed for this kind of Use
      Cases, please refer to §1.5, the first Use Case is the following :</p>
    <p>"<i>The Client can be a bank and the User Questioning API can be
        used to challenge the End-User when he wants to pay on Internet
        in order to secure the transaction. This is similar to
        3D-Secure. The question could be: "Do you allow a payment of x
        euros to party y? (Yes) (No)". </i>"<br>
    </p>
    <p>Is this what you had in mind ?</p>
    <p>Don't forget that in UQ, the user is authenticated just before
      answering the question on the authentication device (in the same
      process).</p>
    <p>In your Use Case, I think that we have to keep in mind that the
      user's answer is important for the SP : the SP wants a
      confirmation of something form the user and it is important that
      the legitimate user (authenticated) can answer negatively to the
      question/confirmation requested by the SP.</p>
    <p>Furthermore, and beyond the 'context issue', in the case you
      mention, the RP is in charge to take a decision (validate or not
      the payment) depending of the user's answer. We agreed, in Paris,
      that when a RP is in charge to enforce a policy (take a decision),
      UQ is relevant. On the other hand, when the OP is in charge to
      enforce a policy, CIBA is relevant (in a server to server mode).<br>
    </p>
    <p>BR,</p>
    <p>Charles.<br>
    </p>
    <br>
    <div class="moz-cite-prefix">Le 01/12/2016 à 14:03, GONZALO
      FERNANDEZ RODRIGUEZ a écrit :<br>
    </div>
    <blockquote
      cite="mid:85AA969E-69E1-4486-AD15-997EC9D3D093@telefonica.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <div>
        <div>I don’t think it is an abuse of the binding message, I
          think that it is more flexible from the point of view of the
          Service Provider and it is a dynamic way to change or
          personalise the message. I understand the binding_message as a
          way to allow the Service Providers to show information in the
          Authentication Device. </div>
        <div><br>
        </div>
        <div>In fact when we were in Paris we talked about the clash
          between CIBA and UQ in some scenarios, for instance when you
          want to confirm a transaction using an authentication and you
          show the amount in the authentication device. Shall I
          implement UQ for this use case?</div>
        <div><br>
        </div>
        <div>Best,</div>
        <div>Gonza.</div>
        <div> </div>
      </div>
      <div><br>
      </div>
      <span id="OLK_SRC_BODY_SECTION">
        <div style="font-family:Calibri; font-size:12pt;
          text-align:left; color:black; BORDER-BOTTOM: medium none;
          BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT:
          0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid;
          BORDER-RIGHT: medium none; PADDING-TOP: 3pt"> <span
            style="font-weight:bold">From: </span>John Bradley <<a
            moz-do-not-send="true" href="mailto:ve7jtb@ve7jtb.com">ve7jtb@ve7jtb.com</a>><br>
          <span style="font-weight:bold">Date: </span>miércoles, 30 de
          noviembre de 2016, 22:45<br>
          <span style="font-weight:bold">To: </span>Gonzalo Fernandez
          Rodriguez <<a moz-do-not-send="true"
            href="mailto:gonzalo.fernandezrodriguez@telefonica.com">gonzalo.fernandezrodriguez@telefonica.com</a>><br>
          <span style="font-weight:bold">Cc: </span>"<a
            moz-do-not-send="true"
            href="mailto:Torsten.Lodderstedt@telekom.de">Torsten.Lodderstedt@telekom.de</a>"
          <<a moz-do-not-send="true"
            href="mailto:Torsten.Lodderstedt@telekom.de">Torsten.Lodderstedt@telekom.de</a>>,
          Axel Nennker <<a moz-do-not-send="true"
            href="mailto:Axel.Nennker@telekom.de">Axel.Nennker@telekom.de</a>>,
          "<a moz-do-not-send="true"
            href="mailto:openid-specs-mobile-profile@lists.openid.net">openid-specs-mobile-profile@lists.openid.net</a>"
          <<a moz-do-not-send="true"
            href="mailto:openid-specs-mobile-profile@lists.openid.net">openid-specs-mobile-profile@lists.openid.net</a>><br>
          <span style="font-weight:bold">Subject: </span>Re:
          [Openid-specs-mobile-profile] OP generated binding_message<br>
        </div>
        <div><br>
        </div>
        <span style="mso-bookmark:_MailOriginalBody">
          <div>
            <div style="word-wrap: break-word; -webkit-nbsp-mode: space;
              -webkit-line-break: after-white-space;" class=""> What
              sort of information related to the transaction?
              <div class=""><br class="">
              </div>
              <div class="">That sounds like an abuse of the binding
                message and more of what you are describing context or
                user questioning for.</div>
              <div class=""><br class="">
              </div>
              <div class="">I agree with axel that the OP is in the best
                position to know what the binding message should be, and
                should be the one to display it on the consumption
                device in the front channel redirect case.</div>
              <div class=""><br class="">
              </div>
              <div class="">All in All it seems simpler fro the OP to
                define and display the binding message and something
                about who is asking for the authentication  “Banko
                Santander” etc.</div>
              <div class=""><br class="">
              </div>
              <div class="">The more you let the RP control on the
                authentication device the more you are open to confused
                user attacks from bad RP.</div>
              <div class=""><br class="">
              </div>
              <div class="">I think separating the binding, context and
                RP are important.</div>
              <div class=""><br class="">
              </div>
              <div class="">John B.</div>
              <div class=""><br class="">
              </div>
              <div class=""><br class="">
                <div>
                  <blockquote type="cite" class="">
                    <div class="">On Nov 30, 2016, at 4:09 PM, GONZALO
                      FERNANDEZ RODRIGUEZ <<a moz-do-not-send="true"
href="mailto:gonzalo.fernandezrodriguez@telefonica.com" class="">gonzalo.fernandezrodriguez@telefonica.com</a>>
                      wrote:</div>
                    <br class="Apple-interchange-newline">
                    <div class="">
                      <div style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px;" class="">
                        <div class="">But…</div>
                        <div class=""><br class="">
                        </div>
                        <div class="">The objective of the
                          binding_message is to interlock both devices
                          in other scenarios different from a simple
                          authentication. In fact, as far as I know the
                          original request came from the banks that
                          wanted show information related with
                          transactions, etc…</div>
                        <div class=""> </div>
                      </div>
                      <div style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px;" class=""> <br
                          class="">
                      </div>
                      <span id="OLK_SRC_BODY_SECTION"
                        style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px;" class="">
                        <div style="font-family: Calibri; font-size:
                          12pt; text-align: left; border-width: 1pt
                          medium medium; border-style: solid none none;
                          padding: 3pt 0in 0in; border-top-color:
                          rgb(181, 196, 223);" class=""> <span
                            style="font-weight: bold;" class="">From:<span
                              class="Apple-converted-space"> </span></span>"<a
                            moz-do-not-send="true"
                            href="mailto:Torsten.Lodderstedt@telekom.de"
                            style="color: purple; text-decoration:
                            underline;" class="">Torsten.Lodderstedt@telekom.de</a>"<br
                            class="">
                          <span style="font-weight: bold;" class="">Date:<span
                              class="Apple-converted-space"> </span></span>Wednesday
                          30 November 2016 at 17:43<br class="">
                          <span style="font-weight: bold;" class="">To:<span
                              class="Apple-converted-space"> </span></span>Gonzalo
                          Fernández, "<a moz-do-not-send="true"
                            href="mailto:Axel.Nennker@telekom.de"
                            style="color: purple; text-decoration:
                            underline;" class="">Axel.Nennker@telekom.de</a>",
                          "<a moz-do-not-send="true"
                            href="mailto:openid-specs-mobile-profile@lists.openid.net"
                            style="color: purple; text-decoration:
                            underline;" class="">openid-specs-mobile-profile@lists.openid.net</a>"<br
                            class="">
                          <span style="font-weight: bold;" class="">Subject:<span
                              class="Apple-converted-space"> </span></span>AW:
                          [Openid-specs-mobile-profile] OP generated
                          binding_message<br class="">
                        </div>
                        <div class=""><br class="">
                        </div>
                        <div xmlns:v="urn:schemas-microsoft-com:vml"
                          xmlns:o="urn:schemas-microsoft-com:office:office"
xmlns:w="urn:schemas-microsoft-com:office:word"
                          xmlns:m="http://schemas.microsoft.com/office/2004/12/omml"
                          xmlns="http://www.w3.org/TR/REC-html40"
                          class="">
                          <div link="blue" vlink="purple" class=""
                            lang="DE">
                            <div class="WordSection1" style="page:
                              WordSection1;">
                              <div style="margin: 0cm 0cm 0.0001pt;
                                font-size: 12pt; font-family: 'Times New
                                Roman', serif;" class=""> <span
                                  style="font-size: 11pt; font-family:
                                  Calibri, sans-serif; color: rgb(31,
                                  73, 125);" class="" lang="EN-US">In
                                  the context of an authentication
                                  process, the OP definitely knows what
                                  to display on the authentication
                                  device, e.g. information about the
                                  service the user is supposed to login
                                  to.<o:p class=""></o:p></span></div>
                              <div style="margin: 0cm 0cm 0.0001pt;
                                font-size: 12pt; font-family: 'Times New
                                Roman', serif;" class=""> <span
                                  style="font-size: 11pt; font-family:
                                  Calibri, sans-serif; color: rgb(31,
                                  73, 125);" class="" lang="EN-US"><o:p
                                    class=""> </o:p></span></div>
                              <div style="border-style: none none none
                                solid; border-left-color: blue;
                                border-left-width: 1.5pt; padding: 0cm
                                0cm 0cm 4pt;" class="">
                                <div class="">
                                  <div style="border-style: solid none
                                    none; border-top-color: rgb(181,
                                    196, 223); border-top-width: 1pt;
                                    padding: 3pt 0cm 0cm;" class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <b class=""><span
                                          style="font-size: 10pt;
                                          font-family: Tahoma,
                                          sans-serif; color:
                                          windowtext;" class="">Von:</span></b><span
                                        style="font-size: 10pt;
                                        font-family: Tahoma, sans-serif;
                                        color: windowtext;" class=""><span
                                          class="Apple-converted-space"> </span>Openid-specs-mobile-profile
                                        [<a moz-do-not-send="true"
                                          href="mailto:openid-specs-mobile-profile-bounces@lists.openid.net"
                                          style="color: purple;
                                          text-decoration: underline;"
                                          class="">mailto:openid-specs-mobile-profile-bounces@lists.openid.net</a>]<span
                                          class="Apple-converted-space"> </span><b
                                          class="">Im Auftrag von<span
                                            class="Apple-converted-space"> </span></b>GONZALO
                                        FERNANDEZ RODRIGUEZ<br class="">
                                        <b class="">Gesendet:</b><span
                                          class="Apple-converted-space"> </span>Mittwoch,
                                        30. November 2016 15:27<br
                                          class="">
                                        <b class="">An:</b><span
                                          class="Apple-converted-space"> </span>Nennker,
                                        Axel;<span
                                          class="Apple-converted-space"> </span><a
                                          moz-do-not-send="true"
                                          href="mailto:openid-specs-mobile-profile@lists.openid.net"
                                          style="color: purple;
                                          text-decoration: underline;"
                                          class="">openid-specs-mobile-profile@lists.openid.net</a><br
                                          class="">
                                        <b class="">Betreff:</b><span
                                          class="Apple-converted-space"> </span>Re:
                                        [Openid-specs-mobile-profile] OP
                                        generated binding_message<o:p
                                          class=""></o:p></span></div>
                                  </div>
                                </div>
                                <div style="margin: 0cm 0cm 0.0001pt;
                                  font-size: 12pt; font-family: 'Times
                                  New Roman', serif;" class=""> <o:p
                                    class=""> </o:p></div>
                                <div class="">
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <span
                                        style="font-size: 10.5pt;
                                        font-family: Calibri,
                                        sans-serif;" class="">Sorry
                                        Axel,<o:p class=""></o:p></span></div>
                                  </div>
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <span
                                        style="font-size: 10.5pt;
                                        font-family: Calibri,
                                        sans-serif;" class=""><o:p
                                          class=""> </o:p></span></div>
                                  </div>
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <span
                                        style="font-size: 10.5pt;
                                        font-family: Calibri,
                                        sans-serif;" class="">I don’t
                                        agree with this approach, the OP
                                        knows better “HOW” to show the
                                        information in the
                                        Authentication device because it
                                        knows de limits of the
                                        authenticator, however I reckon
                                        that is the RP who knows better
                                        “WHAT”  should be displayed.
                                        What I mean is that if the OP
                                        takes a decision to optimise
                                        what should be displayed it can
                                        truncate it and exclude what is
                                        important.<o:p class=""></o:p></span></div>
                                  </div>
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <span
                                        style="font-size: 10.5pt;
                                        font-family: Calibri,
                                        sans-serif;" class=""><o:p
                                          class=""> </o:p></span></div>
                                  </div>
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <span
                                        style="font-size: 10.5pt;
                                        font-family: Calibri,
                                        sans-serif;" class="">Best,<o:p
                                          class=""></o:p></span></div>
                                  </div>
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 12pt;
                                      font-family: 'Times New Roman',
                                      serif;" class=""> <span
                                        style="font-size: 10.5pt;
                                        font-family: Calibri,
                                        sans-serif;" class="">Gonza.<o:p
                                          class=""></o:p></span></div>
                                  </div>
                                </div>
                                <div class="">
                                  <div style="margin: 0cm 0cm 0.0001pt;
                                    font-size: 12pt; font-family: 'Times
                                    New Roman', serif;" class=""> <span
                                      style="font-size: 10.5pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""><o:p class=""> </o:p></span></div>
                                </div>
                                <div style="border-style: solid none
                                  none; border-top-color: rgb(181, 196,
                                  223); border-top-width: 1pt; padding:
                                  3pt 0cm 0cm;" class="">
                                  <div style="margin: 0cm 0cm 0.0001pt;
                                    font-size: 12pt; font-family: 'Times
                                    New Roman', serif;" class=""> <b
                                      class=""><span style="font-family:
                                        Calibri, sans-serif;" class="">From:<span
                                          class="Apple-converted-space"> </span></span></b><span
                                      style="font-family: Calibri,
                                      sans-serif;" class="">Openid-specs-mobile-profile
                                      on behalf of "<a
                                        moz-do-not-send="true"
                                        href="mailto:Axel.Nennker@telekom.de"
                                        style="color: purple;
                                        text-decoration: underline;"
                                        class="">Axel.Nennker@telekom.de</a>"<br
                                        class="">
                                      <b class="">Date:<span
                                          class="Apple-converted-space"> </span></b>Wednesday
                                      30 November 2016 at 14:53<br
                                        class="">
                                      <b class="">To:<span
                                          class="Apple-converted-space"> </span></b>"<a
                                        moz-do-not-send="true"
                                        href="mailto:openid-specs-mobile-profile@lists.openid.net"
                                        style="color: purple;
                                        text-decoration: underline;"
                                        class="">openid-specs-mobile-profile@lists.openid.net</a>"<br
                                        class="">
                                      <b class="">Subject:<span
                                          class="Apple-converted-space"> </span></b>[Openid-specs-mobile-profile]
                                      OP generated binding_message<o:p
                                        class=""></o:p></span></div>
                                </div>
                                <div class="">
                                  <div style="margin: 0cm 0cm 0.0001pt;
                                    font-size: 12pt; font-family: 'Times
                                    New Roman', serif;" class=""> <span
                                      style="font-size: 10.5pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""><o:p class=""> </o:p></span></div>
                                </div>
                                <div class="">
                                  <div class="">
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">I an email to GSMA
                                        I suggested to discuss whether
                                        it is worthwhile reversing the
                                        direction of binding_message.<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">The reasoning is:<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">I think that the OP
                                        knows better what the AD can
                                        display.<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">After receiving the
                                        CIBA request the OP determines
                                        the channel and AD capabilities
                                        (like USSD and SIM Toolkit) and
                                        sends the binding_message to the
                                        AD and the RP in the CIBA
                                        Authentication Request Response.<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">The same suggestion
                                        was raised by Arne during a GSMA
                                        CPAS call this morning.<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">// Axel<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">Here some use case
                                        describing this<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">Polish
                                        policeman (PP) wants to check
                                        driver’s license which the
                                        driver has not present<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">PP
                                        logs into government website
                                        (RP) and enters drivers mobile
                                        number<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">RP
                                        sends CIBA to OP which sends
                                        request to AD
                                        binding_message=”PP Szydło wants
                                        to check your driver’s license”<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US">OP sends
                                        binding_message to RP which is
                                        shown to PP too.<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">User
                                        sees message “PP Szydło wants to
                                        check your driver’s license”,
                                        checks Name PP’s device and
                                        consents<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">OP
                                        notifies RP of consent<o:p
                                          class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">RP
                                        retrieves driver’s picture and
                                        validity data of licence from
                                        its DB<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm 0.0001pt
                                      36pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;
                                      text-indent: -18pt;" class=""> <span
                                        style="" class="" lang="EN-US"><span
                                          class="">-<span
                                            style="font-style: normal;
                                            font-variant-caps: normal;
                                            font-weight: normal;
                                            font-size: 7pt; line-height:
                                            normal; font-family: 'Times
                                            New Roman';" class="">         <span
class="Apple-converted-space"> </span></span></span></span><span
                                        style="" class="" lang="EN-US">RP
                                        sends data to PP who compares
                                        the picture and now knows the
                                        validity of the driver’s license
                                        without giving away too much
                                        data<o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                    <div style="margin: 0cm 0cm
                                      0.0001pt; font-size: 11pt;
                                      font-family: Calibri, sans-serif;"
                                      class=""> <span style="" class=""
                                        lang="EN-US"> <o:p class=""></o:p></span></div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </span><span style="font-family: Calibri,
                        sans-serif; font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px; float: none;
                        display: inline !important;" class=""></span><span
                        style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px; float: none;
                        display: inline !important;" class="">_______________________________________________</span><br
                        style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px;" class="">
                      <span style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px; float: none;
                        display: inline !important;" class="">Openid-specs-mobile-profile
                        mailing list</span><br style="font-family:
                        Calibri, sans-serif; font-size: 14px;
                        font-style: normal; font-variant-caps: normal;
                        font-weight: normal; letter-spacing: normal;
                        orphans: auto; text-align: start; text-indent:
                        0px; text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px;" class="">
                      <span style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px; float: none;
                        display: inline !important;" class=""><a
                          moz-do-not-send="true"
                          href="mailto:Openid-specs-mobile-profile@lists.openid.net"
                          class="">Openid-specs-mobile-profile@lists.openid.net</a></span><br
                        style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px;" class="">
                      <span style="font-family: Calibri, sans-serif;
                        font-size: 14px; font-style: normal;
                        font-variant-caps: normal; font-weight: normal;
                        letter-spacing: normal; orphans: auto;
                        text-align: start; text-indent: 0px;
                        text-transform: none; white-space: normal;
                        widows: auto; word-spacing: 0px;
                        -webkit-text-stroke-width: 0px; float: none;
                        display: inline !important;" class=""><a
                          moz-do-not-send="true"
href="http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile"
                          class="">http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile</a></span></div>
                  </blockquote>
                </div>
                <br class="">
              </div>
            </div>
          </div>
        </span></span> <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Openid-specs-mobile-profile mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openid-specs-mobile-profile@lists.openid.net">Openid-specs-mobile-profile@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile">http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile</a>
</pre>
    </blockquote>
    <br>
    <div class="moz-signature">-- <br>
      <font face="TIMES"><font size="2"> <img
            src="cid:part20.5AC68F38.EF6BF6E8@orange.com" <br=""> <font
            color="BLACK"> <br>
            <b> MARAIS Charles </b><br>
            <b> Orange Labs Lannion</b></font><br>
          Tel : +33 (0)2 96 07 24 18 <br>
          <a href="mailto:charles.marais@orange.com">charles.marais@orange.com</a><br>
          Orange Labs Lannion <br>
          2, avenue Pierre Marzin <br>
          22307 LANNION Cedex - France <br>
          <br>
          <br>
        </font></font></div>
  <PRE>_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>