Skip to main content

4.2. Artifacts

4.2. Artifacts

Claim: A piece of asserted information, often in the form of a name/value pair. Claims make up the usual structure of Evidence and other RATS conceptual messages. Compare: claim [RFC7519].

Endorsement: A secure statement that an Endorser vouches for the integrity of an Attester's various capabilities, such as Claims collection and Evidence signing.

  • Consumed By: Verifier
  • Produced By: Endorser

Evidence: A set of Claims generated by an Attester to be appraised by a Verifier. Evidence may include configuration data, measurements, telemetry, or inferences.

  • Consumed By: Verifier
  • Produced By: Attester

Attestation Result: The output generated by a Verifier, typically including information about an Attester, where the Verifier vouches for the validity of the results.

  • Consumed By: Relying Party
  • Produced By: Verifier

Appraisal Policy for Evidence: A set of rules that a Verifier uses to evaluate the validity of information about an Attester. Compare: security policy [RFC4949].

  • Consumed By: Verifier
  • Produced By: Verifier Owner

Appraisal Policy for Attestation Results: A set of rules that direct how a Relying Party uses the Attestation Results regarding an Attester generated by the Verifiers. Compare: security policy [RFC4949].

  • Consumed by: Relying Party
  • Produced by: Relying Party Owner

Reference Values: A set of values against which values of Claims can be compared as part of applying an Appraisal Policy for Evidence. Reference Values are sometimes referred to in other documents as "known-good values", "golden measurements", or "nominal values". These terms typically assume comparison for equality, whereas here, Reference Values might be more general and be used in any sort of comparison.

  • Consumed By: Verifier
  • Produced By: Reference Value Provider