<?xml version="1.0" encoding="UTF-8"?>
<definitions xmlns:tns="http://ccn2.ec.eu/CCN2.Service.Platform.SecurityPolicies" xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wssp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702" xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata" name="SecurityPolicies" targetNamespace="http://ccn2.ec.eu/CCN2.Service.Platform.SecurityPolicies">
	<!-- *** Addressing Policies *** -->
	<!-- CCN2.Policy.Platform.Rout.Addressing (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Rout.Addressing">
		<wsam:Addressing wsp:Optional="false">
			<wsp:Policy/>
		</wsam:Addressing>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Rout.SyncEPR (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Rout.SyncEPR">
		<wsam:Addressing wsp:Optional="false">
			<wsp:Policy>
				<wsam:AnonymousResponses/>
			</wsp:Policy>
		</wsam:Addressing>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Rout.SyncEPR (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Rout.AsyncEPR">
		<wsam:Addressing wsp:Optional="false">
			<wsp:Policy>
				<wsam:NonAnonymousResponses/>
			</wsp:Policy>
		</wsam:Addressing>
	</wsp:Policy>
	<!-- *** Authentication Policies *** -->
	<!-- CCN2.Policy.Platform.Auth.PlainTextPwd (applicable to CCN2 endpoints only) -->
	<wsp:Policy xmlns:ns1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" ns1:Id="CCN2.Policy.Platform.Auth.PlainTextPwd">
		<wsp:ExactlyOne>
			<wsp:All>
				<ns2:SupportingTokens xmlns:ns2="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<ns2:UsernameToken>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All/>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</ns2:UsernameToken>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</ns2:SupportingTokens>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Auth.SignEncrypt (applicable to CCN2 endpoints only) -->
	<wsp:Policy xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" wsu:Id="wss10_username_token_mutual_authn_sign_encrypt">
		<wsp:ExactlyOne>
			<wsp:All>
				<wssp:AsymmetricBinding xmlns:wssp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<wssp:AlgorithmSuite>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:Basic256Sha256/>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:AlgorithmSuite>
								<wssp:IncludeTimestamp/>
								<wssp:InitiatorToken>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:X509Token wssp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
													<wsp:Policy>
														<wsp:ExactlyOne>
															<wsp:All>
																<wssp:WssX509V3Token10/>
															</wsp:All>
														</wsp:ExactlyOne>
													</wsp:Policy>
												</wssp:X509Token>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:InitiatorToken>
								<wssp:Layout>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:Strict/>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:Layout>
								<wssp:OnlySignEntireHeadersAndBody/>
								<wssp:RecipientToken>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:X509Token wssp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
													<wsp:Policy>
														<wsp:ExactlyOne>
															<wsp:All>
																<wssp:WssX509V3Token10/>
															</wsp:All>
														</wsp:ExactlyOne>
													</wsp:Policy>
												</wssp:X509Token>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:RecipientToken>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</wssp:AsymmetricBinding>
				<ns3:SignedEncryptedSupportingTokens xmlns:ns3="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<ns3:UsernameToken ns3:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<ns3:WssUsernameToken10/>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</ns3:UsernameToken>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</ns3:SignedEncryptedSupportingTokens>
				<ns4:Wss10 xmlns:ns4="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<ns4:MustSupportRefKeyIdentifier/>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</ns4:Wss10>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Auth.SAMLSignEncrypt (applicable to partner's endpoints only) -->
	<wsp:Policy xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" wsu:Id="CCN2.Policy.Platform.Auth.SAML-SignEncrypt">
		<wsp:ExactlyOne>
			<wsp:All>
				<wssp:AsymmetricBinding xmlns:wssp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<wssp:AlgorithmSuite>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:Basic256Sha256/>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:AlgorithmSuite>
								<wssp:IncludeTimestamp/>
								<wssp:ProtectTokens/>
								<wssp:InitiatorToken>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:X509Token wssp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
													<wsp:Policy>
														<wsp:ExactlyOne>
															<wsp:All>
																<wssp:WssX509V3Token11/>
															</wsp:All>
														</wsp:ExactlyOne>
													</wsp:Policy>
												</wssp:X509Token>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:InitiatorToken>
								<wssp:Layout>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:Strict/>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:Layout>
								<wssp:OnlySignEntireHeadersAndBody/>
								<wssp:RecipientToken>
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<wssp:X509Token wssp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Never">
													<wsp:Policy>
														<wsp:ExactlyOne>
															<wsp:All>
																<wssp:WssX509V3Token11/>
															</wsp:All>
														</wsp:ExactlyOne>
													</wsp:Policy>
												</wssp:X509Token>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</wssp:RecipientToken>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</wssp:AsymmetricBinding>
				<ns3:SignedEncryptedSupportingTokens xmlns:ns3="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<ns3:SamlToken ns3:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
									<wsp:Policy>
										<wsp:ExactlyOne>
											<wsp:All>
												<ns3:WssSamlV20Token11/>
											</wsp:All>
										</wsp:ExactlyOne>
									</wsp:Policy>
								</ns3:SamlToken>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</ns3:SignedEncryptedSupportingTokens>
				<ns4:Wss11 xmlns:ns4="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
					<wsp:Policy>
						<wsp:ExactlyOne>
							<wsp:All>
								<ns4:MustSupportRefKeyIdentifier/>
							</wsp:All>
						</wsp:ExactlyOne>
					</wsp:Policy>
				</ns4:Wss11>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- *** Confidentially *** -->
	<!-- CCN2.Policy.Platform.Conf.Body (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Conf.Body">
		<wsp:ExactlyOne>
			<wsp:All>
				<wssp:EncryptedParts>
					<wssp:Body/>
				</wssp:EncryptedParts>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Conf.Header (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Conf.Header">
		<wsp:ExactlyOne>
			<wsp:All>
				<wssp:EncryptedParts>
					<wssp:Header Name="MessageHeader" Namespace="http://ccn2.ec.eu/CCN2.Service.Platform.CommonSchema"/>
				</wssp:EncryptedParts>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Conf.Header (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Conf.HeaderBody">
		<wsp:ExactlyOne>
			<wsp:All>
				<wsp:PolicyReference URI="CCN2.Policy.Platform.Conf.Header"/>
				<wsp:PolicyReference URI="CCN2.Policy.Platform.Conf.Body"/>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- *** Integrity Policies *** -->
	<!-- CCN2.Policy.Platform.Inte.Body (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Inte.Body">
		<wsp:ExactlyOne>
			<wsp:All>
				<wssp:SignedParts>
					<wssp:Body/>
				</wssp:SignedParts>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
	<!-- CCN2.Policy.Platform.Inte.Header (applicable to all types of endpoint) -->
	<wsp:Policy wsu:Id="CCN2.Policy.Platform.Inte.Header">
		<wsp:ExactlyOne>
			<wsp:All>
				<wssp:SignedParts>
					<wssp:Header Namespace="http://www.w3.org/2005/08/addressing"/>
					<wssp:Header Name="MessageHeader" Namespace="http://ccn2.ec.eu/CCN2.Service.Platform.CommonSchema"/>
				</wssp:SignedParts>
			</wsp:All>
		</wsp:ExactlyOne>
	</wsp:Policy>
</definitions>
