Figures captions

These functions operates on the following assets list.

![Figure 4.2-1: Assets](media/Figures/Risks/Assets.png)

**Figure 4.2-1: Assets** 

## 4.2 Product Architecture

The product is defined by the integration of several key elements, including **Product audit & administration**, **Registration**, **Certificate generation**, **Certificate status**, and/or **Revocation management**. Each element exposes functions that are defined in [Product Functions](#41-product-functions). The diagram below provides a high-level overview of the product architecture and the interactions between its constituent elements.

![Figure 4.3-1: Indicative product architecture](media/Figures/UC_Architecture/FunctionalArchitecture.png)

**Figure 4.3-1: Indicative product architecture**

In addition, the product elements may be configured in multiple ways depending on the deployment requirements:

- EXAMPLE 2: Products deployed to support internal IT service for network security deployments (e.g. VPN, ssh, TLS servers).

- EXAMPLE 3: User management (identification and authentication) for services like User & Device Authentication, Single Sign-On (SSO).

**Figure U.1.2: UC1 functional architecture**

![Figure U.1.2: UC1 functional architecture](media/Figures/UC_Architecture/UC1.png)

**Figure U.1.2: UC1 functional architecture**

### U.1.3 UC1 - Product Functions and assets

- EXAMPLE 1: Products deployed for Trust services. Software used to issue certificates for trust services including those used in electronic attribute attestation.

- EXAMPLE 2: Products deployed by telecommunications service providers used to manage proofs of identity, authorization, and encryption to enable secure access to internal services and customer-facing networks, including e.g. 5G core and edge systems, as standardized in 3GPP TS 33.501 and ETSI GS NFV 003. The product is responsible for the issuance, revocation, and overall management of certificates and certificate status information (e.g., via CRLs or OCSP).

**Figure U.2.2: UC2 functional architecture**

![Figure U.2.2: UC2 functional architecture](media/Figures/UC_Architecture/UC2.png)

**Figure U.2.2: UC2 functional architecture**

### U.2.3 UC2 - List of functions

Product audit & administration

- EXAMPLE 1: Products deployed for a PKI used in large enterprise or critical entities (e.g, eIDAS where in the context of the present document ETSI EN 319 411-1 [\[i.10\]](#_ref_i.10) defines requirements on security hardware elements of the PKI and requirement of software elements of the PKI for use in eIDAS).

**Figure U.3.2: UC3 functional architecture**

![Figure U.3.2: UC3 functional architecture](media/Figures/UC_Architecture/UC3.png)

**Figure U.3.2: UC3 functional architecture**

### U.3.3 UC3 - List of functions

Product audit & administration

- EXAMPLE 1: Products deployed for Trust services. Software used to issue certificates for trust services including those used in electronic attribute attestation.

**Figure U.4.2: UC4 functional architecture**

![Figure U.4.2: UC4 functional architecture](media/Figures/UC_Architecture/UC4.png)

**Figure U.4.2: UC4 functional architecture**

### U.4.3 UC4 - List of functions

Product audit & administration

  - NOTE 2:	In the C-ITS model the product uses pseudonymous key pairs and cycles them rapidly and the product may need to have multiple key pairs maintained at any one time, this may place constraints on the number of private keys that have to be maintained in the product.

- EXAMPLE 2:	In a smart contract environment, such as that outlined in ETSI TR 119 540 [[i.15](#_ref_i_15)], the chain of trust requires that a device operates within multiple trust domains across and evidenced in the use of a distributed ledger wherein some entries may be signed as proof of an attribute attestation (e.g. a contractual state transition), or signed as proof of an identity attestation (e.g. identifying the legal entity that is a smart contract stakeholder).

**Figure U.5.2: UC5 functional architecture**

![Figure U.5.2: UC5 functional architecture](media/Figures/UC_Architecture/UC5.png)

**Figure U.5.2: UC5 functional architecture**

### U.5.3 UC5 - List of functions

Product audit & administration