Message Code Validation Message Code CredentialsReplacementMode 0x0100 rootBySupplier 0x0101 rootByWanProvider 0x0102 supplierBySupplier 0x0103 networkOperatorByNetworkOperator 0x0104 accessControlBrokerByACB 0x0105 wanProviderByWanProvider 0x0106 transCoSByTransCoS 0x0107 supplierByTransCoS 0x0108 anyExceptAbnormalRootByRecovery 0x0109 anyByContingency Table 13.3.5.2: Message Code validation against CredentialsReplacementMode Preventing Replay of Commands The Protection Against Replay mechanisms for the Update Security Credentials Command shall be that specified in this Section 13.3.5.3 (which is different than that for other GBCS Commands). For each of RemotePartyRole from which the Device can receive a valid Updated Security Credentials Command, the Device shall allocate storage for a Highest Prior Sequence Number which shall be capable of storing a 64 bit unsigned integer and which shall initially be set to the value zero at manufacture. Before executing any Update Security Credentials Command, a Device shall confirm that, if CredentialsReplacementMode <> accessControlBrokerByACB, then (authorisingRemotePartyTACellIdentifier is populated in the Command) and (the authorisingRemotePartySeqNumber is strictly numerically greater than the Highest Prior Sequence Number the Device has recorded for the RemotePartyRole identified in authorisingRemotePartyTACellIdentifier) else
Message Code Validation CredentialsReplacementMode Message Code rootBySupplier 0x0100 rootByWanProvider 0x0101 supplierBySupplier 0x0102 networkOperatorByNetworkOperator 0x0103 accessControlBrokerByACB 0x0104 wanProviderByWanProvider 0x0105 transCoSByTransCoS 0x0106 supplierByTransCoS 0x0107 anyExceptAbnormalRootByRecovery 0x0108 anyByContingency 0x0109 Table 13.3.5.2: Message Code validation against CredentialsReplacementMode Preventing Replay of Commands The Protection Against Replay mechanisms for the Update Security Credentials Command shall be that specified in this Section 13.3.5.3 (which is different than that for other GBCS Commands). For each of RemotePartyRole from which the Device can receive a valid Updated Security Credentials Command, the Device shall allocate storage for a Highest Prior Sequence Number which shall be capable of storing a 64 bit unsigned integer and which shall initially be set to the value zero at manufacture. Before executing any Update Security Credentials Command, a Device shall confirm that, if CredentialsReplacementMode <> accessControlBrokerByACB, then (authorisingRemotePartyTACellIdentifier is populated in the Command) and (the authorisingRemotePartySeqNumber is strictly numerically greater than the Highest Prior Sequence Number the Device has recorded for the RemotePartyRole identified in authorisingRemotePartyTACellIdentifier) else