MASA
AR
Scan QR
Code on
Generate Self-signed
Use as ClientCertificate
Visit URL
Given QR
Do OAUTH2 dance?
Get Certificate (optional?)
signed by MASA
Connect to BRSKI port
/requestvoucherrequest (+ SPnonce)
Receive voucherrequest
(w/ SPnonce)
Send to voucherrequest
To MASA
Encrypt (ECIES)
With public
Key of AR
Receive
voucher
Send voucher
To AR
Receive reply,
exit provisional state
Send telemetry
Reply to MASA