Consumer Data Right Register Design - v1.3.0 Release Notes

V1.3.0 Release Notes

V1.3.0 Release Notes

Release notes for version 1.3.0 of the CDR Register Design.

Introduction

Section	Change	Description
Future Dated Obligations	Updated Dynamic Client Registration	- Added July 2021 changes for `legal_entity_id`, `legal_entity_name`, `sector_identifier_uri` and additional scope `openid`

Client Registration

Section	Change	Description
Dynamic Client Registration	Updated SSA Lifetime	- Removed manual distribution as this was only required for industry testing
SSA Definition	Updated Scopes	- Added tabs to table to differentiate requirements for different release dates - Added `openid` to the list of supported scopes defined in the SSA - Added `sector_identifier_uri`, `legal_entity_id` and `legal_entity_name` to the SSA definition
Registration Request using JWT	Updated Registration Request using JWT	- Corrected `grant_types` claim array entry removing urn:ietf:params:oauth:grant-type:jwt-bearer - Added `openid` to the list of scopes returned in a successful registration request
Sector Identifiers	Updated Sector Identifiers	- Indicated support for `sector_identifier_uri` is required for July 2021
Registration Flows	Updated Create and Modify Registration Diagrams	- Corrected sequence of events. Formatting request occurs after retrieval of oidc configuration

Participant Statuses

Section	Change	Description
ETag Support	Added ETag Support	- Outlines how the ETag header can be used for change detection on public endpoints

Security Profile

Section	Change	Description
Client Authentication	Updated Client Authentication with the CDR Register	- To provide additional support to collection arrangements, updated `iss`, `sub` and `client_id` to use Brand ID OR Software Product ID
Certificate Management	Updated Certificate Management	- Added Certificate Trust Model - Certificate Signing Request Profile - Added CSR profile for certificate requests - Added Certificate Usage and Certificate Practice Statement including OCSP details

Register APIs

Section	Change	Description
BaseUrls	Updated BaseUrls	- Added separate bases for TLS and mTLS endpoints

DCR APIs

Section	Change	Description
Register a client using a CDR Register issued Software Statement Assertion	Updated Scopes	- Added `openid` and `cdr:registration` to the list of scopes returned in a successful registration request

General

Section	Change	Description
Intermediaries	Added intermediaries section	- Intermediaries added with outline of Collection Arrangements
Archives	Added archives section	- Archives of release milestones added for reference