2018-03-22 2026-01-15 Registration requests should be sent to the mailing list described in . If approved, designated experts should notify IANA within three weeks. For assistance, please contact iana@iana.org. IANA does not monitor the list. Integer values from -256 to 255 Standards Action Integer values from -65536 to -257 Specification Required Integer values from 256 to 65535 Specification Required Integer values greater than 65535 Expert Review Strings of length 1 Standards Action Strings of length 2 Specification Required Strings of length greater than 2 Expert Review Mike Jones, Hannes Tschofenig, Ludwig Seitz Reserved for Private Use less than -65536 Unassigned -65536 to -262 globalplatform_component This claim holds an array of CBOR maps in which each array entry holds a map containing claims about a GlobalPlatform component that is within the boundary of the enclosing Entity Attestation Token. N/A -261 map GlobalPlatform Entity Attestation Protocol Specification, GPP_SPE_001, Section 6.5. hcert Health Certificate hcert -260 map Electronic Health Certificate Specification EUPHNonce Challenge Nonce EUPHNonce -259 bstr FIDO Device Onboard Specification EATMAROEPrefix Signing prefix for multi-app restricted operating environments EATMAROEPrefix -258 bstr FIDO Device Onboard Specification EAT-FDO EAT-FDO may contain related to FIDO Device Onboarding EAT-FDO -257 array FIDO Device Onboard Specification Unassigned -256 to -1 Reserved This registration reserves the key value 0 0 iss Issuer iss 1 text string sub Subject sub 2 text string aud Audience aud 3 text string exp Expiration Time exp 4 integer or floating-point number nbf Not Before nbf 5 integer or floating-point number iat Issued At iat 6 integer or floating-point number cti CWT ID jti 7 byte string cnf Confirmation cnf 8 map scope The scope of an access token, as defined in . scope 9 byte string or text string Nonce Nonce eat_nonce 10 bstr or array vct (TEMPORARY - registered 2025-12-02, expires 2026-12-02) Verifiable credential type vct 11 bstr Unassigned 12 to 37 ace_profile The ACE profile a token is supposed to be used with. ace_profile 38 integer cnonce The client-nonce sent to the AS by the RS via the client. cnonce 39 byte string exi The expiration time of a token measured from when it was received at the RS in seconds. exi 40 unsigned integer Unassigned 41 to 168 identity-data Registering the claim for storing identity data of a person, which could be personally identifiable data (PII) mostly used in Foundational/National ID for cross-border interoperability. identity-data 169 map CBOR Identity Data in QR Code, Section 3 CBOR Identity Data in QR Code, Section 4 Unassigned 170 to 255 UEID Universal Entity ID ueid 256 bstr SUEIDs Semipermanent UEIDs sueids 257 map Hardware OEM ID Hardware OEM ID oemid 258 bstr or int Hardware Model Model identifier for hardware hwmodel 259 bstr Hardware Version Hardware Version Identifier hwversion 260 array Uptime Uptime uptime 261 uint OEM Authorized Boot Indicates whether the software booted was OEM authorized oemboot 262 bool Debug Status The status of debug facilities dbgstat 263 uint Location The geographic location location 264 map EAT Profile The EAT profile followed eat_profile 265 uri or oid Submodules Section The section containing submodules submods 266 map Boot Count The number of times the entity or submodule has been booted bootcount 267 uint Boot Seed Identifies a boot cycle bootseed 268 bstr DLOAs Certifications received as Digital Letters of Approval dloas 269 array Software Name The name of the software running in the entity swname 270 tstr Software Version The version of software running in the entity swversion 271 array Software Manifests Manifests describing the software installed on the entity manifests 272 array Measurements Measurements of the software, memory configuration, and such on the entity measurements 273 array Software Measurement Results The results of comparing software measurements to reference values measres 274 array Intended Use The intended use of the EAT intuse 275 uint Unassigned 276 to 281 geohash Geohash String geohash 282 text string or array Fast and Readable Geographical Hashing (CTA-5009) Unassigned 283 to 298 cmw A RATS Conceptual Message Wrapper cmw 299 CBOR map, CBOR array, or CBOR tag RFC-ietf-rats-msg-wrap-22, Sections 3.1, 3.2, 3.3 wmver The version of the WM Token wmver 300 unsigned integer ETSI TS 104 002 V1.1.1 wmvnd The WM technology vendor wmvnd 301 unsigned integer ETSI TS 104 002 V1.1.1 wmpatlen The length in bits of the WM pattern wmpatlen 302 unsigned integer ETSI TS 104 002 V1.1.1 wmsegduration The nominal duration of a segment wmsegduration 303 map ETSI TS 104 002 V1.1.1 wmpattern The WM pattern wmpattern 304 COSE_Encrypt0 or COSE_Encrypt or byte string ETSI TS 104 002 V1.1.1 wmid Used as input to derive the WM pattern for indirect mode wmid 305 text string ETSI TS 104 002 V1.1.1 wmopid Used as additional input to derive the WM pattern for indirect mode wmopid 306 unsigned integer ETSI TS 104 002 V1.1.1 wmkeyver The key to use for derivation of the WM pattern in indirect mode wmkeyver 307 unsigned integer ETSI TS 104 002 V1.1.1 catreplay Common Access Token Replay N/A 308 unsigned integer CTA-5007 catpor Common Access Token Probability of Rejection N/A 309 array CTA-5007 catv Common Access Token Version N/A 310 unsigned integer CTA-5007 catnip Common Access Token Network IP N/A 311 array CTA-5007 catu Common Access Token URI N/A 312 map CTA-5007 catm Common Access Token Method N/A 313 array CTA-5007 catalpn Common Access Token ALPN N/A 314 array CTA-5007 cath Common Access Token Header N/A 315 map CTA-5007 catgeoiso3166 Common Access Token Geographic ISO3166 N/A 316 array CTA-5007 catgeocoord Common Access Token Geographic Coordinate N/A 317 array CTA-5007 catgeoalt Common Access Token Geographic Altitude N/A 318 array CTA-5007 cattpk Common Access Token TLS Public Key N/A 319 byte string CTA-5007 catifdata Common Access Token If Data N/A 320 string or array CTA-5007 catdpop Common Access Token DPoP Settings N/A 321 map CTA-5007 catif Common Access Token If N/A 322 map CTA-5007 catr Common Access Token Renewal N/A 323 map CTA-5007 Unassigned 324 to 2393 psa-client-id PSA Client ID N/A 2394 signed integer psa-security-lifecycle PSA Security Lifecycle N/A 2395 unsigned integer psa-implementation-id PSA Implementation ID N/A 2396 byte string Unassigned 2397 psa-certification-reference PSA Certification Reference N/A 2398 text string psa-software-components PSA Software Components N/A 2399 array psa-verification-service-indicator PSA Verification Service Indicator N/A 2400 text string Unassigned 2401 to 65535 Specification Required Ludwig Seitz, Mike Jones Registration requests should be sent to the mailing list described in . If approved, designated experts should notify IANA within three weeks. For assistance, please contact iana@iana.org. IANA does not monitor the list. COSE_Key COSE_Key Representing Public Key jwk 1 COSE_Key structure Encrypted_COSE_Key Encrypted COSE_Key jwe 2 COSE_Encrypt or COSE_Encrypt0 structure (with an optional corresponding COSE_Encrypt or COSE_Encrypt0 tag) kid Key Identifier kid 3 binary string osc OSCORE_Input_Material carrying the parameters for using OSCORE per-message security with implicit key confirmation osc 4 map ckt COSE Key SHA-256 Thumbprint (none) 5 binary string Unassigned 6-322 jkt JWK SHA-256 Thumbprint jkt 323 byte string CTA-5007 Consumer Technology Association mailto:standards&cta.tech 2024-02-21 DASH Industry Forum https://dashif.org 2023-03-01 European eHealth Network mailto:jakob&kirei.se 2021-04-15 FIDO Alliance mailto:iana-request&fidoalliance.org 2021-03-05 GlobalPlatform Inc. mailto:secretariat&globalplatform.org 2024-08-14 Hannes Tschofenig mailto:hannes.tschofenig&arm.com 2022-07-27 IESG mailto:iesg&ietf.org IETF mailto:iesg&ietf.org MOSIP mailto:resham&mosip.io 2024-05-15