ATH-UC-05: Authentication using an eID

Use case ID

ATH-UC-05-BF

Use case name

Authentication using an eID card

Actors

• Citizen

• Healthcare giver
• Representative of an institution

Short Description

This use case denotes the authentication of a user via an eID card.

1 (High)

Must have: The system must implement this goal/ assumption to be accepted.

Pre-Conditions

• The user has already an account

• The user has:

• an eID card

• a PIN code of his/her eID card

• a wireless card reader

Post-Conditions

• The user is authenticated

• The user has access to the services of the mobile application

Steps (basic flow)

0

1

The user connects using his/her credentials (eID card + PIN) and the wireless card reader

2

3

The SP sends an authentication request to the IDP

4

The IDP checks the identity of the user with the AA 

5

The IDP sends a response message to the SP to inform it that the user is identified

6

The SP returns a response message to the application to enable the authentication

7

The user is authenticated and can use the the services of the mobile application

Exceptions (exception flows)

• The PIN of the eID card is not correct

• The creation is aborted (e.g. loss of connection, problem with the wireless card reader, the session is expired)

Frequency

Use case ID

ATH-UC-05-AF-01

Use case name

Actors

• Citizen

• Healthcare giver

• Representative of an institution

Short Description

Depending on the profile of the actor, this alternative flow will be instantiated by one of the four use cases dedicated to the creation of a new account (refer to the basic flows): ATH-UC-01, ATH-UC-02, ATH-UC-03, ATH-UC-04.

Priority

1 (High)

Must have: The system must implement this goal/ assumption to be accepted.

Pre-Conditions

• The user has not an account

• The user has:

• an e-mail address

• an eID card

• a code PIN of his/her eID card

• a wireless card reader

Post-Conditions

• The user has an account

• The user knows his credentials

• The user is authenticated

• The user has access to the services of the mobile application

For more details and depending on the type of the actor, see:

• The citizen - ATH-UC-01
• The mandated citizen - ATH-UC-02
• The healthcare giver - ATH-UC-03
• The institution representative - ATH-UC-04

Exceptions (exception flows)

• The citizen made an error when editing his/her credentials

• The PIN of the eID card is not correct

• The creation is aborted (e.g. loss of connection)

Frequency

• Every time the user wants to authenticate him/herself and he/she does not have an account.

Use case ID

ATH-UC-05-EF-01

Use case name

The PIN of the eID card is not correct

Actors

• Citizen

• Representative of an institution

• Healthcare giver

Short Description

It denotes the use case when the user tries to authenticate with his/her eID card and fails in entering the PIN.

Priority

1 (High)

Must have: The system must implement this goal/ assumption to be accepted.

Pre-Conditions

• The user has already an account

• The user has:

  • an eID card

  • a PIN code of his/her eID card

  • a wireless card reader

Post-Conditions

• The authentication is interrupted
• An error message should be displayed

Steps (basic flow)

0

The user access to the WebSSO application interface to authenticate him/herself and choose the option eID

1

The user tries to connect using a wrong PIN code

2

Frequency

• Every time for a user needs to authenticate him/herself and enter a wrong PIN code