November 2021 release

martin-lindstrom · martin-lindstrom · commit e3e7d98ca356 · 2021-11-10T15:32:55.000+01:00
diff --git a/00 - Swedish eID Framework - Introduction.md b/00 - Swedish eID Framework - Introduction.md
@@ -8,14 +8,14 @@
 
 # Introduction to the Swedish eID Framework
 
-### 2020-01-17
+### 2021-11-11
 
-Registration number: **2019-267** (*previously: ELN-0600*)
+Registration number: **2019-267**
 
 ---
 
 <p class="copyright-statement">
-Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2020. All Rights Reserved.
+Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2021. All Rights Reserved.
 </p>
 
 ## Table of Contents
@@ -299,7 +299,7 @@ section 1.7.3 below.
 Service to send the request to. This is dependent on the nationality of the user's
 eID issuer.
 
-> \[2\]: At the time of writing (September 2019) there is no attribute authority available
+> \[2\]: At the time of writing there is no attribute authority available
 providing Swedish personal identity numbers based on eIDAS attributes.
 
 
@@ -372,15 +372,13 @@ whether there exists a registered Swedish personal identity number for the perso
 being authenticated, and may, if this is the case, add this information to the identity
 assertion that is sent back to the Swedish service provider.
 
-> \[1\]: At the time of writing (September 2019) there is no attribute authority available
+> \[1\]: At the time of writing there is no attribute authority available
 providing Swedish personal identity numbers based on eIDAS attributes.
 
 <a name="swedish-eids-in-foreign-services"></a>
 #### 1.7.4. Swedish eID:s in Foreign Services
 
-The eIDAS regulations states that Sweden has the possibility to notify Swedish eID:s 
-according to the assurance levels low, substantial and high. There is a political will
-in Sweden to allow holders of Swedish eID:s log in to foreign e-services<sup>1</sup>.
+Sweden has notified Swedish eID:s according to the assurance levels substantial and high. 
 
 A request for authentication from a foreign service provider is sent to the Swedish 
 eIDAS node (*eIDAS proxy service*) via an eIDAS connector in the service provider country. 
@@ -395,9 +393,6 @@ is issued (according to the Swedish eID Framework). This assertion is received b
 Swedish eIDAS node (proxy service), and transformed to an assertion according to the
 eIDAS specifications before being sent to the foreign eIDAS connector, and then to the
 initiating foreign service provider.
- 
-> \[1\]: The project for notifying Swedish eID for use within the eIDAS cooperation began 
-in September 2019.
 
 <a name="technical-specifications"></a>
 ## 2. Technical Specifications
@@ -412,13 +407,13 @@ otherwise stated.
 ### 2.1. SAML Profiles
 
 Identity federations conforming to the Swedish eID Framework are built around
-”Deployment Profile for the Swedish eID Framework”, [\[EidProfile](#eidprofile)\].
-This profile is influenced by, but not normatively dependent on, ”SAML V2.0 Deployment Profile for Federation Interoperability” \[[SAML2Int](#saml2int)\]. [\[EidProfile](#eidprofile)\] also contains rules and guidelines specific for the Swedish eID Framework.
+”Deployment Profile for the Swedish eID Framework”, \[[EidProfile](#eidprofile)\].
+This profile is influenced by, but not normatively dependent on, ”SAML V2.0 Deployment Profile for Federation Interoperability” \[[SAML2Int](#saml2int)\]. \[[EidProfile](#eidprofile)\] also contains rules and guidelines specific for the Swedish eID Framework.
 
 <a name="deployment-profile-for-the-swedish-eid-framework"></a>
 #### 2.1.1. Deployment Profile for the Swedish eID Framework
 
-The ”Deployment Profile for the Swedish eID Framework” specification, [\[EidProfile](#eidprofile)\], 
+The ”Deployment Profile for the Swedish eID Framework” specification, \[[EidProfile](#eidprofile)\], 
 is the main specification of the eID Framework and comprises of:
 
 - How SAML metadata is constructed and interpreted.
@@ -545,7 +540,7 @@ defines a "Signature Activation Protocol" (SAP) for implementation of "Sole Cont
 
 <a name="eidtillit"></a>
 **\[EidTillit\]**
-> [Tillitsramverk för Svensk e-legitimation - 2018-158](https://docs.swedenconnect.se/technical-framework/mirror/digg/Tillitsramverk-for-Svensk-e-legitimation-2018-158.pdf)
+> [Tillitsramverket för Svensk e-legitimation](https://www.digg.se/digital-identitet/e-legitimering/tillitsnivaer/tillitsramverket).
 
 <a name="eidprofile"></a>
 **\[EidProfile\]**
diff --git a/00 - Tekniskt ramverk - Introduktion.md b/00 - Tekniskt ramverk - Introduktion.md
@@ -8,14 +8,14 @@
 
 # En introduktion till Sweden Connect Tekniskt ramverk
 
-### 2020-01-17
+### 2021-11-11
 
-Diarienummer: **2019-267** (*tidigare: ELN-0600*)
+Diarienummer: **2019-267**
 
 ---
 
 <p class="copyright-statement">
-Copyright &copy; <a href="https://www.digg.se">Myndigheten för digital förvaltning (DIGG)</a>, 2015-2020.
+Copyright &copy; <a href="https://www.digg.se">Myndigheten för digital förvaltning (DIGG)</a>, 2015-2021.
 </p>
 
 ## Innehållsförteckning
@@ -328,7 +328,7 @@ i kapitlet 1.7.3 nedan.
 
 > \[1\]: Egentligen väljer användaren till vilken ”eIDAS Proxy-tjänst” som begäran ska skickas vidare till. Detta är beroende landstillhörigheten för användarens e-legitimationsutfärdare.
 
-> \[2\]: I skrivande stund (september 2019) finns ingen attributtjänst som utför koppling mellan eIDAS-identiteter och svenska personnummer.
+> \[2\]: I skrivande stund finns ingen attributtjänst som utför koppling mellan eIDAS-identiteter och svenska personnummer.
 
 
 <a name="underskrifter-med-utlaendska-e-legitimationer"></a>
@@ -409,20 +409,17 @@ det finns ett registrerat personnummer för den
 legitimerade personen och kan, om så är fallet, påföra sådan information
 i det identitetsintyg som skickas till e-tjänsten.
 
-> \[1\]: I skrivande stund (september 2019) finns ingen attributtjänst som utför koppling mellan eIDAS-identiteter och svenska personnummer.
+> \[1\]: I skrivande stund finns ingen attributtjänst som utför koppling mellan eIDAS-identiteter och svenska personnummer.
 
 <a name="svenska-e-legitimationer-i-utlaendska-e-tjaenster"></a>
 #### 1.7.4. Svenska e-legitimationer i utländska e-tjänster
 
-Sverige har möjlighet att anmäla svenska e-legitimationer på tillitsnivå låg (low), väsentlig (substantial) och hög (high) enligt eIDAS. Det finns en politisk vilja i Sverige att låta innehavare av svenska e-legitimationer logga in i utländska tjänster<sup>1</sup>.
+Sverige har anmält svenska e-legitimationer på tillitsnivå väsentlig (substantial) och hög (high) enligt eIDAS. 
  
 En begäran om legitimering från en utländsk e-tjänst ställs till den svenska eIDAS-noden (proxy-tjänst) via en s.k. eIDAS-connector i e-tjänstens land. 
 I den svenska eIDAS-noden väljer användaren med vilken svensk e-legitimation denne önskar autentisera sig, varpå en legitimeringsbegäran till den legitimeringstjänst (*Identity Provider*) som hanterar vald e-legitimation skickas. Denna begäran är utformad enligt tekniskt ramverk vilket innebär att en svensk legitimeringstjänst inte behöver förhålla sig till eIDAS tekniska specifikationer.
 
 Användaren autentiseras hos den svenska legitimeringstjänsten och ett identitetsintyg ställs ut (enligt tekniskt ramverk). Detta intyg mottas av den svenska eIDAS Proxy-tjänsten och omvandlas till ett intyg enligt eIDAS specifikationer innan det skickas vidare till den utländska eIDAS-connectorn och därpå till den anropande e-tjänsten (*Service Provider*).
- 
-> \[1\]: Projektet för att anmäla svenska e-legitimationer för användande inom eIDAS-samarbetet
-påbörjades under september 2019. 
 
 <a name="tekniska-specifikationer"></a>
 ## 2. Tekniska specifikationer
@@ -438,12 +435,12 @@ tekniskt ramverk.
 ### 2.1. SAML-profiler
 
 Identitetsfederationer som följer Sweden Connect tekniska ramverk är uppbyggda
-kring ”Deployment Profile for the Swedish eID Framework”, [\[EidProfile](#eidprofile)\]. Denna profil är influerad av, men inte normativt beroende på, ”SAML V2.0 Deployment Profile for Federation Interoperability” \[[SAML2Int](#saml2int)\]. [\[EidProfile](#eidprofile)\] innehåller också regler och riktlinjer specifika för Sweden Connect tekniskt ramverk. 
+kring ”Deployment Profile for the Swedish eID Framework”, \[[EidProfile](#eidprofile)\]. Denna profil är influerad av, men inte normativt beroende på, ”SAML V2.0 Deployment Profile for Federation Interoperability” \[[SAML2Int](#saml2int)\]. \[[EidProfile](#eidprofile)\] innehåller också regler och riktlinjer specifika för Sweden Connect tekniskt ramverk. 
 
 <a name="deployment-profile-for-the-swedish-eid-framework"></a>
 #### 2.1.1. Deployment Profile for the Swedish eID Framework
 
-”Deployment Profile for the Swedish eID Framework”, [\[EidProfile](#eidprofile)\], är huvuddokumentet för tekniskt ramverk och specificerar bland annat:
+”Deployment Profile for the Swedish eID Framework”, \[[EidProfile](#eidprofile)\], är huvuddokumentet för tekniskt ramverk och specificerar bland annat:
 
 - Hur SAML metadata ska byggas upp och tolkas.
 
@@ -530,8 +527,8 @@ ramverk.
 
 Implementationsprofilen ”Implementation Profile for Using OASIS DSS in
 Central Signing Services”, \[[EidDSSProfile](#eiddssprofile)\], specificerar en profil för
-underskriftsbegäran och respons enligt OASIS standarden ”Digital
-Signature Service Core Protocols, Elements, and Bindings”,
+underskriftsbegäran och respons enligt OASIS standarden "Digital
+Signature Service Core Protocols, Elements, and Bindings",
 \[[DSS](#dss)\].
 
 <a name="dss-extensions"></a>
@@ -561,7 +558,7 @@ Specifikationen "Signature Activation Protocol for Federated Signing", \[[EidSig
 
 <a name="eidtillit"></a>
 **\[EidTillit\]**
-> [Tillitsramverk för Svensk e-legitimation - 2018-158](https://docs.swedenconnect.se/technical-framework/mirror/digg/Tillitsramverk-for-Svensk-e-legitimation-2018-158.pdf)
+> [Tillitsramverket för Svensk e-legitimation](https://www.digg.se/digital-identitet/e-legitimering/tillitsnivaer/tillitsramverket).
 
 <a name="eidprofile"></a>
 **\[EidProfile\]**
@@ -594,8 +591,7 @@ Specifikationen "Signature Activation Protocol for Federated Signing", \[[EidSig
 
 <a name="eiddssprofile"></a>
 **\[EidDSSProfile\]**
-> [Implementation Profile for Using OASIS DSS in Central Signing
-> Services](https://docs.swedenconnect.se/technical-framework/latest/07_-_Implementation_Profile_for_using_DSS_in_Central_Signing_Services.html).
+> [Implementation Profile for Using OASIS DSS in Central Signing Services](https://docs.swedenconnect.se/technical-framework/latest/07_-_Implementation_Profile_for_using_DSS_in_Central_Signing_Services.html).
 
 <a name="eiddssext"></a>
 **\[EidDSSExt\]**
diff --git a/02 - Deployment Profile for the Swedish eID Framework.md b/02 - Deployment Profile for the Swedish eID Framework.md
@@ -8,9 +8,9 @@
 
 # Deployment Profile for the Swedish eID Framework
 
-### Version 1.7 - 2021-10-14 - *Draft version*
+### Version 1.7 - 2021-11-11
 
-Registration number: **2019-308** (*previously: ELN-0602*)
+Registration number: **2019-308**
 
 ---
 
@@ -1606,7 +1606,7 @@ A service wishing to receive encrypted messages where SHA-1 is not used as the k
 
 <a name="eidtillit"></a>
 **\[EidTillit\]**
-> [Tillitsramverk för Svensk e-legitimation - 2018-158](https://docs.swedenconnect.se/technical-framework/mirror/digg/Tillitsramverk-for-Svensk-e-legitimation-2018-158.pdf)
+> [Tillitsramverket för Svensk e-legitimation](https://www.digg.se/digital-identitet/e-legitimering/tillitsnivaer/tillitsramverket).
 
 <a name="eidregistry"></a>
 **\[EidRegistry\]**
@@ -1626,8 +1626,7 @@ A service wishing to receive encrypted messages where SHA-1 is not used as the k
 
 <a name="seiddssprofile"></a>
 **\[EidDSS\_Profile\]**
-> [Implementation Profile for Using OASIS DSS in Central Signing
-> Services](https://docs.swedenconnect.se/technical-framework/latest/07_-_Implementation_Profile_for_using_DSS_in_Central_Signing_Services.html).
+> [Implementation Profile for Using OASIS DSS in Central Signing Services](https://docs.swedenconnect.se/technical-framework/latest/07_-_Implementation_Profile_for_using_DSS_in_Central_Signing_Services.html).
 
 <a name="sigsap"></a>
 **\[SigSAP\]**
diff --git a/03 - Registry for Identifiers.md b/03 - Registry for Identifiers.md
@@ -8,9 +8,9 @@
 
 # Swedish eID Framework - Registry for identifiers
 
-### Version 1.7 - 2021-11-09 - *Draft version*
+### Version 1.7 - 2021-11-11
 
-Registration number: **2019-309** (*previously: ELN-0603*)
+Registration number: **2019-309**
 
 ---
 
diff --git a/04 - Attribute Specification for the Swedish eID Framework.md b/04 - Attribute Specification for the Swedish eID Framework.md
@@ -8,9 +8,9 @@
 
 # Attribute Specification for the Swedish eID Framework
 
-### Version 1.7 - 2021-10-14 *Draft version*
+### Version 1.7 - 2021-11-11
 
-Registration number: **2019-310** (*previously: ELN-0604*)
+Registration number: **2019-310**
 
 ---
 
@@ -322,7 +322,7 @@ The following attributes are defined for use within the attribute profile for th
 | displayName | urn:oid:2.16.840.1.<br/>113730.3.1.241 | Display Name | A name in any preferred presentation format. | No | No | Valfrid Lindeman |
 | gender | urn:oid:1.3.6.1.5.5.7.9.3 | Gender | A one letter representation (“M”/”F”/”U” or “m”/“f”/”u”) representing the subject’s gender, where “M” represents male, “F” represents female and “U” is used for unspecified, or unknown, gender. | No | No | M |
 | personalIdentity-<br/>Number | urn:oid:1.2.752.29.4.13 | National civic registration number/code | Swedish ”personnummer” or ”samordningsnummer” according to [SKV 704](#skv704) and [SKV 707](#skv707). 12 digits without hyphen. | No | No | 195006262546 |
-| previousPersonal-<br/>IdentityNumber | 1.2.752.201.3.15 | A user's previous national civic registration number, see [section 3.2.6](#the-previouspersonalidentitynumber-attribute) below. | See `personalIdentityNumber` above. | No | No | 197010632391 |
+| previousPersonal-<br/>IdentityNumber | urn:oid:1.2.752.201.3.15 | A user's previous national civic registration number, see [section 3.2.6](#the-previouspersonalidentitynumber-attribute) below. | See `personalIdentityNumber` above. | No | No | 197010632391 |
 | dateOfBirth | urn:oid:1.3.6.1.5.5.7.9.1 | Date of birth | Date of birth expressed using the format YYYY-MM-DD. | No | No | 1950-06-26 |
 | birthName | urn:oid:1.2.752.201.3.8 | Name at the time of birth | Full name of a person at birth. | No | No | Valfrid Danielsson |
 | street | urn:oid:2.5.4.9 | Street address | Street address. | No | No | Mosebacke torg 3 |
@@ -762,17 +762,15 @@ following attribute:
 
 <a name="tillitramv"></a>
 **\[TillitRamv\]**
-> [Tillitsramverk för Svensk e-legitimation - 2018-158](https://docs.swedenconnect.se/technical-framework/mirror/digg/Tillitsramverk-for-Svensk-e-legitimation-2018-158.pdf)
-
+> [Tillitsramverket för Svensk e-legitimation](https://www.digg.se/digital-identitet/e-legitimering/tillitsnivaer/tillitsramverket).
 
 <a name="eiddeployprof"></a>
 **\[EidDeployProf\]**
 > [Deployment Profile for the Swedish eID Framework](https://docs.swedenconnect.se/technical-framework/latest/02_-_Deployment_Profile_for_the_Swedish_eID_Framework.html).
 
 <a name="constructedattr"></a>
 **\[ConstructedAttr\]**
-> [eIDAS Constructed Attributes Specification for the Swedish eID
-> Framework](https://docs.swedenconnect.se/technical-framework/latest/11_-_eIDAS_Constructed_Attributes_Specification_for_the_Swedish_eID_Framework.html).
+> [eIDAS Constructed Attributes Specification for the Swedish eID Framework](https://docs.swedenconnect.se/technical-framework/latest/11_-_eIDAS_Constructed_Attributes_Specification_for_the_Swedish_eID_Framework.html).
 
 <a name="eidas-attr"></a>
 **\[eIDAS\_Attr\]**
diff --git a/06 - Entity Categories for the Swedish eID Framework.md b/06 - Entity Categories for the Swedish eID Framework.md
@@ -8,10 +8,10 @@
 
 # Entity Categories for the Swedish eID Framework
 
-### Version 1.8 - 2021-11-09 - *Draft version*
+### Version 1.8 - 2021-11-01
 
 
-Registration number: **2019-311** (*previously: ELN-0606*)
+Registration number: **2019-311**
 
 ---
 
diff --git a/07 - Implementation Profile for using DSS in Central Signing Services.md b/07 - Implementation Profile for using DSS in Central Signing Services.md
@@ -8,14 +8,14 @@
 
 #  Implementation Profile for using OASIS DSS in Central Signing Services
 
-### Version 1.5 - 2021-10-14 - *Draft version*
+### Version 1.5 - 2021-11-11
 
-Registration number: **2019-312** (*previously: ELN-0607*)
+Registration number: **2019-312**
 
 ---
 
 <p class="copyright-statement">
-Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2020. All Rights Reserved.
+Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2021. All Rights Reserved.
 </p>
 
 ## Table of Contents
@@ -648,7 +648,7 @@ EidSignResponse | Base64 encoded sign response.
 
 <a name="dss-ext"></a>
 **[DSS-Ext]**
-> [DSS Extension for Federated Central Signing Services](https://docs.swedenconnect.se/technical-framework/updates/09_-_DSS_Extension_for_Federated_Signing_Services.html).
+> [DSS Extension for Federated Central Signing Services](https://docs.swedenconnect.se/technical-framework/latest/09_-_DSS_Extension_for_Federated_Signing_Services.html).
 
 <a name="eid-registry"></a>
 **[Eid-Registry]**
diff --git a/09 - DSS Extension for Federated Signing Services.md b/09 - DSS Extension for Federated Signing Services.md
@@ -8,9 +8,9 @@
 
 # DSS Extension for Federated Central Signing Services
 
-### Version 1.4 - 2020-09-29 - *Draft version*
+### Version 1.4 - 2021-11-11
 
-Registration number: **2019-314** (*previously: ELN-0609*)
+Registration number: **2019-314**
 
 ---
 
@@ -1250,9 +1250,7 @@ signature and MUST check that the signature covers all data in the
 
 <a name="csig-xsd"></a>
 **\[Csig-XSD\]**
-> This specification's DSS Extensions schema Version 1.1, https://docs.swedenconnect.se/schemas/csig/1.1/EidCentralSigDssExt-1.1.xsd, August 2015.
-
-> See also the draft version: https://docs.swedenconnect.se/schemas/csig/1.1/EidCentralSigDssExt-1.1.2-DRAFT.xsd, June 2020.
+> This specification's DSS Extensions schema Version 1.1.2, https://docs.swedenconnect.se/schemas/csig/1.1/EidCentralSigDssExt-1.1.2.xsd, June 2020.
 
 <a name="dss"></a>
 **\[OASIS-DSS\]**
diff --git a/11 - eIDAS Constructed Attributes Specification for the Swedish eID Framework.md b/11 - eIDAS Constructed Attributes Specification for the Swedish eID Framework.md
@@ -8,14 +8,14 @@
 
 # eIDAS Constructed Attributes Specification for the Swedish eID Framework
 
-### Version 1.2 - 2020-12-16 - *Draft version*
+### Version 1.2 - 2021-11-11
 
-Registration number: **2019-315** (*previously: ELN-0611*)
+Registration number: **2019-315**
 
 ---
 
 <p class="copyright-statement">
-Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2020. All Rights Reserved.
+Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2021. All Rights Reserved.
 </p>
 
 ## Table of Contents
@@ -440,6 +440,7 @@ prid generation fails.
   private static final String personIdentifierPrefixRegexp = "^[A-Za-z]{2}[\\/](SE|se)[\\/]";
 
   public String getPridIdentifierComponent(String personIdentifier) throws PridGenerationException {
+    
     if (personIdentifier == null) {
       throw new PridGenerationException("Missing personIdentifier");
     }
diff --git a/12 - BankID Profile for the Swedish eID Framework.md b/12 - BankID Profile for the Swedish eID Framework.md
@@ -8,14 +8,14 @@
 
 # Implementation Profile for BankID Identity Providers within the Swedish eID Framework
 
-### Version 1.3 - 2020-12-17 - *Draft*
+### Version 1.3 - 2021-11-11
 
-Registration number: **2019-316** (*previously: ELN-0612*)
+Registration number: **2019-316**
 
 ---
 
 <p class="copyright-statement">
-Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2020. All Rights Reserved.
+Copyright &copy; <a href="https://www.digg.se">The Swedish Agency for Digital Government (DIGG)</a>, 2015-2021. All Rights Reserved.
 </p>
 
 ## Table of Contents
@@ -549,15 +549,13 @@ It is RECOMMENDED that a Signature Service explicitly requires release of the `u
 
 <a name="bankid-spec"></a>
 **\[BankID_Spec\]**
-> [BankID Relying Party Guidelines, version 3.5](https://www.bankid.com/assets/bankid/rp/bankid-relying-party-guidelines-v3.5.pdf).
-> 
-> *Check [www.bankid.com/rp/info](https://www.bankid.com/rp/info) for lastest version.*
+> [BankID Relying Party Guidelines, version 3.6](https://www.bankid.com/assets/bankid/rp/bankid-relying-party-guidelines-v3.6.pdf).
+
+> Check <https://www.bankid.com/utvecklare/guider> for the latest version.
 
 <a name="bankid-md"></a>
 **\[BankID_MD\]**
-> [BankID - Guidelines for Formatted Text, version 1.1](https://www.bankid.com/assets/bankid/rp/guidelines-for-formatted-text-v1.1.pdf).
-
-> *Check [www.bankid.com/rp/info](https://www.bankid.com/rp/info) for lastest version.*
+> [BankID - Guidelines for Formatting Text](https://www.bankid.com/utvecklare/guider/formatera-text).
 
 <a name="eid-profile"></a>
 **\[EidProfile\]**
diff --git a/README.md b/README.md
diff --git a/versions.md b/versions.md
