Update file EN-304-624.md

| Name | Description | Security needs |

| --- | --- | --- |

|  |   ------------------------------------ Keys ------------------------------------- |     |   

|  --------------------- |   ------------------------------------ Keys ------------------------------------- |   ---------------------  |   

| A\_Canonical Public Key | Public key generated by ITS-Station and used by the EA to verify EC request signature. | Integrity |

| A\_Data encryption key | AES key used to encrypt requests and responses messages data. | Integrity, confidentiality |

| A\_CA private keys | Private keys corresponding to the public keys contained in CA certificates issued by the PKI system. These keys are used for signature/encryption mechanisms. | Confidentiality, integrity |

|  |  ------------------------------------ Certificates -------------------------------------   |     |     |

| ---------------------  |  ------------------------------------ Certificates -------------------------------------   |  ---------------------   |

| A\_CA Certificates | This includes the root CA self-signed, EA, AA, and MA certificates generated by the root CA. | Availability |

| A\_Enrolment Credential (EC) | EC is a certificate that contains a unique name, a public key, and other attributes. | Integrity |

| A\_Authorization Ticket (AT) | AT is a pseudonym certificate that does not contain any identification information but public key(s) and other attributes. | Integrity |

| A\_TLM certificate | Self-signed certificate managed by EU | Availability |

|  |  ------------------------------------ Station registration data ------------------------------------ |     | 

| --------------------- |  --------------------------- Station registration data --------------------------- |  ---------------------   | 

| A\_Canonical ID | This information is stored at initial registration of the ITS station under the responsibility of the manufacturer. The canonical ID shall contain a substring identifying the manufacturer or operator to make uniqueness of this identifier possible. | Integrity, confidentiality |

| A\_ITS-S Profile | The profile information for the ITS-S that may contain an initial list of maximum appPermissions (ITS-AIDs with SSPs), region restrictions, etc., which may be modified over time. | Integrity |

| A\_Tag | HMAC-SHA 256 of the keys to be certified. | Confidentiality, integrity |

| A\_HMAC key | Key used to compute Tags sent with AT requests. | Confidentiality, integrity, availability |

| --------------- |  ------------------------------------ CA Network addresses ------------------------------------ | --------------- | 

| --------------------- |  --------------------------- CA Network addresses --------------------------- | --------------------- | 

| A\_CA Network addresses | URL used to communicate with the CA. | Integrity, availability |

| A\_DC network address | URL used to communicate with the DC. | Integrity, availability |

| A\_CPOC Network address | URL used to communicate with the DC. | Integrity, availability |

| --------------------- |  ------------------------------------ Policies ------------------------------------ | --------------------- | 

| Policies |     |     |     |

| A\_Certificate Policy configuration data | Configuration data defining the role and duties of the PKI entities, including definition of parameters for: issuance, publication, archiving, revocation, renewal. This includes the certificate profiles. | Integrity, availability |

| --------------- |  ------------------------------------ Trust lists ------------------------------------ | --------------- |

| --------------------- |  ------------------------------------ Trust lists ------------------------------------ | --------------------- |

| A\_CRL | This list contains all information about revoked entities and needs to be protected from any malicious change. We need to assure the integrity of this list as defined in (1). | Integrity, availability |

| A\_CTL | This list contains all information about trusted entity certificates (CA), using the format and properties as defined in (1). | Integrity, availability |

| A\_ECTL | This list contains all information about root CA certificates (certificates, URL to access the CPOC, ...) as defined by (1). | Integrity, availability |

| --------------- |  ------------------------------------ PKI services ------------------------------------ | --------------- | 

| --------------------- |  ------------------------------------ PKI services ------------------------------------ | --------------------- | 

| A\_Software/Execution of the software | Correct execution of the TOE function to provide the correct services. | Integrity |

| --------------- |  ------------------------------------ Misbehavior detection ------------------------------------ | --------------- | 

| --------------------- |  -------------------------------- Misbehavior detection -------------------------------- | --------------------- | 

| A\_Misbehaviour Report (MR) | Reports sent by the ITS-S to the MA to provide information regarding a possible misbehaving ITS-S (8). | Integrity, availability |

<br />