HƯỚNG DẪN SẢN PHẨM

Trusted SIC
Hướng dẫn Pilot có kiểm soát

Hướng dẫn theo vai trò cho onboarding tenant, đăng ký RP, phê duyệt Passkey, định tuyến đa CA, kích hoạt, ký được bảo vệ và vận hành bằng chứng.

HÀNH TRÌNH VẬN HÀNH

Mười sáu tác vụ được quản trị.

Tenant onboarding

Define organization, trust boundary, data residency, operators and evidence retention.

Relying-party registration

CA/provider connectors

Configure route, credentials, health, eligibility and approved failover.

Signer identity mapping

Map OIDC subject and verified identity to signing accounts.

Passkey registration

Signing profiles

Configure format, algorithm, provider, verifier and evidence policy.

Create signing request

Submit hashes, signer, context, approval and expiry.

Transaction display

Render document identity, purpose, amount and relying-party facts.

Passkey approval

Generate challenge and verify assertion, origin, RP ID and policy.

Signature activation

Issue short-lived single-use SAD/authorization.

Protected execution

Invoke HSM/QSCD/SAM through the approved provider route.

ASiC packaging

Assemble manifest, detached signatures and supporting evidence.

Timestamp & validation

Collect TSA, certificate path, OCSP/CRL and report.

Status & callbacks

Track asynchronous state and deliver governed notifications.

Failure & recovery

Handle expiry, provider outage, partial verification and approved rollback.

Audit & support

Export correlated evidence, operational metrics and support package.

CHECKLIST QUẢN TRỊ VIÊN

Approve tenant, RP, provider and profile owners
Freeze supported browsers/authenticators and CA routes
Configure rotation, revocation, retention and incident contacts
Run negative, replay, expiry and failover tests

CHECKLIST DEVELOPER

Use idempotency and correlation for every state change
Never log document contents, credentials, SAD or private key data
Display transaction facts before approval
Persist evidence identifiers and verify final state