ATIS 1000091

The Signature-based Handling of Asserted information using toKENs (SHAKEN) standard ATIS-1000074 specifies operation within the domain of a single national or regional regulatory authority – in most cases this means within a single country. ATIS-1000087, "Mechanism for Initial Cross-Border Signature-based Handling of Asserted information using toKENs (SHAKEN)" provides a mechanism that can be used between two or more countries, but assumes that the countries have similar legal and regulatory environments, and that they can therefore fully trust each other. It was recognized that this was an initial mechanism and that a different approach would be needed to extend SHAKEN to cover all countries. This Technical Report proposes a mechanism that could be used for all countries. This document does not replace ATIS-1000087 but complements it. In practice, both mechanisms could be deployed, and countries could decide on a case-by-case basis which approach to use with a given partner country.