@blueid/access-proto 0.13.0

package/BlueCore.proto

@@ -0,0 +1,841 @@
+syntax = "proto2";
+
+import "nanopb.proto";
+
+///////////////////////////////////////////////////////////////////////
+// Shared demo keys
+///////////////////////////////////////////////////////////////////////
+
+message BlueSharedDemoData {
+  required string deviceId = 1
+      [ (nanopb).max_length = 8, default = "wa0y1YwS" ];
+  required bytes terminalPrivateKey = 2 [
+    (nanopb).max_size = 160,
+    default = "\x30\x81\x87\x02\x01\x00\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02"
+              "\x01\x06\x08\x2a\x86\x48\xce\x3d\x03\x01\x07\x04\x6d\x30\x6b\x02"
+              "\x01\x01\x04\x20\xa5\xab\x6d\x14\x11\x30\x47\xa7\xad\x6c\x10\xe4"
+              "\x4d\xe6\x3c\x05\xb9\x6b\x84\xb5\x1f\xe3\x14\xd6\x87\x5c\x46\x9e"
+              "\xb9\xcd\x69\x2b\xa1\x44\x03\x42\x00\x04\x3a\x66\x86\x75\xc9\x29"
+              "\x29\x07\xc3\x63\x18\x97\x4d\xd9\x44\x1c\x71\xf9\xe4\x45\xe8\x74"
+              "\x1a\x3f\xaf\x6b\xc5\x8c\x9c\x69\x13\xbe\x44\x14\x0b\x60\x45\x4f"
+              "\x76\x2f\xc2\xf1\x98\x41\x98\xec\x6e\x39\x1b\x53\x36\x8b\x90\x73"
+              "\xea\x1d\xe7\x20\xcf\xa1\xbe\x2d\xd4\xf1"
+  ];
+  required bytes terminalPublicKey = 3 [
+    (nanopb).max_size = 100,
+    default = "\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a"
+              "\x86\x48\xce\x3d\x03\x01\x07\x03\x42\x00\x04\x3a\x66\x86\x75\xc9"
+              "\x29\x29\x07\xc3\x63\x18\x97\x4d\xd9\x44\x1c\x71\xf9\xe4\x45\xe8"
+              "\x74\x1a\x3f\xaf\x6b\xc5\x8c\x9c\x69\x13\xbe\x44\x14\x0b\x60\x45"
+              "\x4f\x76\x2f\xc2\xf1\x98\x41\x98\xec\x6e\x39\x1b\x53\x36\x8b\x90"
+              "\x73\xea\x1d\xe7\x20\xcf\xa1\xbe\x2d\xd4\xf1"
+  ];
+  // --
+  required bytes signaturePrivateKey = 4 [
+    (nanopb).max_size = 160,
+    default = "\x30\x81\x87\x02\x01\x00\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02"
+              "\x01\x06\x08\x2a\x86\x48\xce\x3d\x03\x01\x07\x04\x6d\x30\x6b\x02"
+              "\x01\x01\x04\x20\xef\x36\x55\xc9\x4d\x80\x1e\xf4\x92\x56\x75\x0e"
+              "\x70\xe1\x51\x0e\xcc\xe8\xb4\x6c\x54\x5e\x55\x1d\xde\xbb\xfc\x6f"
+              "\x22\xa8\x49\x50\xa1\x44\x03\x42\x00\x04\x5a\x0d\x6e\x67\x45\xcc"
+              "\xd5\xc1\x8c\xeb\xd8\xaf\xf6\xea\x86\xd8\xc3\xaf\x43\x3f\xb7\xa2"
+              "\xd2\x5f\x21\x34\x42\xd4\xcd\x96\x83\xb4\xe6\x7d\x2d\xdc\x25\xeb"
+              "\x53\xf9\x12\x76\x1e\x40\xe6\xc9\x99\x83\xdd\x90\x90\xfe\xf0\xb4"
+              "\x25\x99\xcd\x16\xae\x39\x2f\xcf\x96\x43"
+  ];
+  required bytes signaturePublicKey = 5 [
+    (nanopb).max_size = 100,
+    default = "\x30\x59\x30\x13\x06\x07\x2a\x86\x48\xce\x3d\x02\x01\x06\x08\x2a"
+              "\x86\x48\xce\x3d\x03\x01\x07\x03\x42\x00\x04\x5a\x0d\x6e\x67\x45"
+              "\xcc\xd5\xc1\x8c\xeb\xd8\xaf\xf6\xea\x86\xd8\xc3\xaf\x43\x3f\xb7"
+              "\xa2\xd2\x5f\x21\x34\x42\xd4\xcd\x96\x83\xb4\xe6\x7d\x2d\xdc\x25"
+              "\xeb\x53\xf9\x12\x76\x1e\x40\xe6\xc9\x99\x83\xdd\x90\x90\xfe\xf0"
+              "\xb4\x25\x99\xcd\x16\xae\x39\x2f\xcf\x96\x43"
+  ];
+}
+
+///////////////////////////////////////////////////////////////////////
+// Base types
+///////////////////////////////////////////////////////////////////////
+
+enum BlueReturnCode {
+  //
+  // Success results
+  //
+  Ok = 0;
+  Pending = 1;
+
+  //
+  // General errors
+  //
+  Error = -1;
+  InvalidArguments = -3;
+  InvalidState = -4;
+  NotSupported = -5;
+  EOF = -6;
+  Overflow = -7;
+  StorageFull = -8;
+  InvalidCrc = -9;
+  InvalidMemoryAddress = -10;
+  VersionMissmatch = -11;
+  InvalidSignature = -12;
+  InvalidValidity = -13;
+  CryptLibraryFailed = -14;
+  NotFound = -16;
+  AlreadyExists = -17;
+  Timeout = -18;
+  Disconnected = -19;
+  PointerConversionFailed = -20;
+  Unavailable = -21;
+
+  Test = -29;
+
+  //
+  // Misc specific errors
+  //
+
+  EncodeDataWriteFailed = -30;
+  EncodeDataWriteNothingWritten = -31;
+  DecodeDataReadFailed = -32;
+  BleInvalidCompanyIdentifier = -33;
+  InvalidSystemConfig = -34;
+  InvalidProvisioning = -35;
+  InvalidTransponder = -104;
+  BleServiceNotFound = -105;
+  BleCharacteristicNotFound = -106;
+  BleFailSetCharacteristicNotify = -107;
+
+  //
+  // Nfc Transponder errors
+  //
+
+  NfcTransponderNoResult = -100;
+  NfcTransponderCommandError = -101;
+  NfcTransponderStorageFull = -102;
+  NfcTransponderAuthenticateFailed = -103;
+
+  //
+  // SP Errors
+  //
+  SPInvalidSalt = -150;
+  SPFailedHashing = -151;
+  SPFailedSigning = -152;
+  SPFailedGetOwnSalt = -153;
+  SPFailedSetPeerSalt = -154;
+  SPFailedEncrypt = -155;
+  SPFailedDecrypt = -156;
+  SPFailedGetCurrentTime = -157;
+  SPFailedSignature = -158;
+  SPErrorStatusCode = -170;
+
+  //
+  // Oss errors
+  //
+
+  OssInvalidCredentialId = -200;
+
+  OssMaFailedMcpLib = -201;
+
+  OssSoIncompatibleMajorVersion = -230;
+  OssSoInvalidCredentialType = -231;
+  OssSoInvalidTimestamp = -233;
+  OssSoInvalidTimeperiod = -234;
+  OssSoInvalidSiteId = -235;
+  OssSoInvalidDoorAccessBy = -236;
+  OssSoInvalidDoorDTScheduleNumber = -237;
+  OssSoTimePeriodsCountMissmatch = -238;
+  OssSoInvalidDTScheduleNumber = -239;
+  OssSoEventIdNotSupportedForWrite = -242;
+  OssSoExtensionFileSizeTooLarge = -243;
+  OssSoExtensionFileSizeInvalid = -244;
+  OssSoExtensionTooManyFeatures = -245;
+  OssSoExtensionValueTooLarge = -246;
+  OssSoInvalidExtensionLength = -247;
+  OssSoInvalidExtensionTag = -248;
+  OssSoMaxEventEntriesExceeded = -249;
+  OssSoMaxBlacklistEntriesExceeded = -250;
+
+  OssSidIncompatibleMajorVersion = -280;
+  OssSidInvalidCredentialType = -281;
+
+  //
+  // Mifare Desfire errors
+  //
+  MifareDesfireWrongKeyType = -300;
+  MifareDesfireWrongKey = -301;
+  MifareDesfireCmacNotReceived = -302;
+  MifareDesfireCmacNotVerified = -303;
+  MifareDesfireNoneOrInvalidAid = -304;
+
+  //
+  // Everything after here equals OssMaIoReturnCode codes; to gather the
+  // original OssMaIoReturnCode code simply do OssMAReturnCodeStart - returnCode
+  //
+
+  OssMAReturnCodeStart = -1000;
+  OssMAReturnCodeEnd = -1100;
+}
+
+message BlueVersionInfo {
+  required uint32 buildTime = 1;
+  required uint32 version = 2;
+}
+
+message BlueLocalTimestamp {
+  required uint32 year = 1;
+  required uint32 month = 2;
+  required uint32 date = 3;
+  required uint32 hours = 4;
+  required uint32 minutes = 5;
+  required uint32 seconds = 6 [ default = 0 ];
+}
+
+message BlueLocalTimeperiod {
+  required uint32 hoursFrom = 1;
+  required uint32 minutesFrom = 2;
+  required uint32 hoursTo = 3;
+  required uint32 minutesTo = 4;
+}
+
+enum BlueTimeUnit {
+  Seconds = 1;
+  Minutes = 2;
+  Hours = 3;
+  Days = 4;
+  Months = 5;
+  Years = 6;
+}
+
+// Those may never be changed
+enum BlueWeekday {
+  Monday = 0;
+  Tuesday = 1;
+  Wednesday = 2;
+  Thursday = 3;
+  Friday = 4;
+  Saturday = 5;
+  Sunday = 6;
+};
+
+message BlueLocalTimeSchedule {
+  // Day of year is always 1-366, to spawn whole year make 1->366
+  required uint32 dayOfYearStart = 1;
+  required uint32 dayOfYearEnd = 2;
+  // See BlueWeekday -> byte 0 = Monday, etc.
+  required bytes weekdays = 3
+      [ (nanopb).max_size = 7, (nanopb).fixed_length = true ];
+  required BlueLocalTimeperiod timePeriod = 4;
+}
+
+message BlueCredentialId {
+  required string id = 1 [ (nanopb).max_length = 10 ];
+}
+
+message BlueBlacklistEntry {
+  required BlueCredentialId credentialId = 1;
+  required BlueLocalTimestamp expiresAt = 2;
+}
+
+enum BlueAccessType {
+  /* Access with default unlock time */
+  DefaultTime = 1;
+  /* Access with extended unlock time */
+  ExtendedTime = 2;
+  /* Access with custom unlock time */
+  CustomTime = 3;
+  /* Access with toggle function */
+  Toggle = 4;
+  /* Access and close the lock */
+  Close = 5;
+  /* No access */
+  NoAccess = 6;
+  /* No access due validity */
+  NoAccessValidity = 7;
+  /* No access due blacklisted */
+  NoAccessBlacklisted = 8;
+};
+
+enum BlueTransponderType {
+  UnknownTransponder = 0;
+  MobileTransponder = 1;
+  MifareDesfire = 2;
+}
+
+enum BlueHardwareType {
+  UnknownHardware = 0;
+  TestHardware = 1;
+  Gateway = 2;
+  CylinderLock = 3;
+  WallReader = 4;
+  Kiosk = 5;
+}
+
+enum BlueBatteryLevel {
+  UnknownBattery = 0;
+  OnPower = 1;
+  GoodPower = 10;
+  LowPower = 11;
+  CriticalPower = 12;
+  AlmostEmpty = 13;
+  // 0% (100) - 100% (200)
+  FullyDischarged = 100;
+  FullyCharged = 200;
+}
+
+message BlueBleManufacturerInfo {
+  required BlueHardwareType hardwareType = 1;
+  required BlueBatteryLevel batteryLevel = 2;
+  required uint32 applicationVersion = 3;
+  required uint32 localMidnightTimeEpoch = 4;
+}
+
+message BlueBleAdvertisementInfo {
+  // Unique device id becomes the local name
+  required string deviceId = 1 [ (nanopb).max_length = 8 ];
+  // The advertised tx power level at 1 meter in decibel (-XX - +XX)
+  required int32 txPower1Meter = 2;
+  // If set generates iBeacon format otherwise generates regular ble adv data
+  required bool isIBeacon = 3;
+  // The manufacturer information
+  required BlueBleManufacturerInfo mfInfo = 4;
+}
+
+///////////////////////////////////////////////////////////////////////
+// Event
+///////////////////////////////////////////////////////////////////////
+
+enum BlueEventId {
+  // Oss So events --
+
+  /** eventInfo = 0 */
+  BatteryLow = 0x01;
+  /** eventInfo = 0 */
+  BatteryReplaced = 0x02;
+  /** eventInfo = 0 */
+  LockJammed = 0x03;
+  /** eventInfo = BlueEventInfoSystem */
+  SystemEvent = 0x04;
+  /** eventInfo = 0 */
+  InternalError = 0x05;
+  /** eventInfo = 0 */
+  FailedToUnlock = 0x06;
+  /** eventInfo = 0 */
+  TamperingDetected = 0x07;
+  /** eventInfo = 0 */
+  BlacklistedCredentialDetected = 0x08;
+  /** eventInfo = 0 */
+  BlacklistFull = 0x09;
+  /** eventInfo = BlueEventInfoAccess */
+  AccessGranted = 0x0A;
+  /** eventInfo = BlueEventInfoAccess */
+  AccessDenied = 0x0B;
+  /** eventInfo = 0 */
+  CRCError = 0x0C;
+
+  MaxOssSoEventId = 0x0D;
+
+  // -- Oss So events
+
+  /** eventInfo = BlueReturnCode */
+  TerminalCommand = 0xE;
+  /** eventInfo = BlueReturnCode */
+  TerminalOss = 0xF;
+
+  /* Reserved 0x0C - 0xFF */
+}
+
+enum BlueEventInfoSystem {
+  // Oss So events --
+
+  SystemRestart = 0x01;
+  SystemConfigured = 0x2;
+
+  // -- Oss So events
+
+  /* Reserved 0x03 - 0x7F */
+
+  /* Proprietary 0x80 - 0xFF */
+}
+
+enum BlueEventInfoAccess {
+  // Oss So events --
+
+  Granted = 0x01;
+  GrantedDefaultTime = 0x02;
+  GrantedExtendedTime = 0x03;
+  GrantedToggleUnlock = 0x04;
+  GrantedToggleLock = 0x05;
+
+  // -- Oss So events
+
+  /* Reserved 0x06 - 0x7F */
+
+  // Oss So events --
+
+  Denied = 0x80;
+
+  /* Reserved 0x81 */
+
+  DeniedBlacklisted = 0x82;
+  DeniedValidity = 0x83;
+  DeniedDTSchedule = 0x84;
+
+  // -- Oss So events
+
+  /* Reserved 0x85 - 0xFF */
+}
+
+message BlueEvent {
+  required uint32 sequenceId = 1;
+
+  required BlueLocalTimestamp eventTime = 2;
+
+  required BlueEventId eventId = 4;
+
+  required int32 eventInfo = 5;
+
+  // Set if identity related
+  optional string identity = 6 [ (nanopb).max_length = 10 ];
+
+  // Set if eventId =
+  optional string command = 7 [ (nanopb).max_length = 8 ];
+}
+
+///////////////////////////////////////////////////////////////////////
+// Secure Protocol
+///////////////////////////////////////////////////////////////////////
+
+message BlueSPHandshake {
+  required bytes transponderSalt = 1
+      [ (nanopb).max_size = 16, (nanopb).fixed_length = true ];
+}
+
+message BlueSPHandshakeReply {
+  required bytes terminalSalt = 1
+      [ (nanopb).max_size = 16, (nanopb).fixed_length = true ];
+  required bytes terminalSignature = 2 [ (nanopb).max_size = 74 ];
+}
+
+message BlueSPDataCommand {
+  required BlueCredentialId credentialId = 1;
+  required BlueLocalTimestamp validityStart = 2;
+  required BlueLocalTimestamp validityEnd = 3;
+  required string command = 4 [ (nanopb).max_length = 8 ];
+  required bytes data = 5
+      [ (nanopb).max_size = 1792 ]; // we'll add 256b for add. data
+}
+
+message BlueSPData {
+  required bytes signature = 1 [ (nanopb).max_size = 74 ];
+
+  oneof payload {
+    BlueSPDataCommand command = 2;
+    BlueOssSoMobile ossSo = 3;
+    BlueOssSidMobile ossSid = 4;
+  }
+}
+
+message BlueSPResult {
+  required bytes data = 1
+      [ (nanopb).max_size = 1792 ]; // we'll add 256b for add. data
+}
+
+///////////////////////////////////////////////////////////////////////
+// Oss shared types
+///////////////////////////////////////////////////////////////////////
+
+enum BlueOssCredentialTypeSource {
+  Oss = 0;
+  Proprietary = 1;
+}
+
+message BlueOssAccessResult {
+  // If access is granted or not
+  required bool accessGranted = 1;
+  // The final access type
+  required BlueAccessType accessType = 2;
+  // If access type is a toggle then this specifies the time it should lock
+  // again
+  required BlueLocalTimestamp scheduleEndTime = 3;
+  // If access denied this marks if it was denied due a schedule missmatch
+  required bool scheduleMissmatch = 4;
+}
+
+///////////////////////////////////////////////////////////////////////
+// Oss Sid Standard
+///////////////////////////////////////////////////////////////////////
+
+message BlueOssSidVersion {
+  optional uint32 versionMajor = 1 [ default = 1 ];
+  optional uint32 versionMinor = 2 [ default = 0 ];
+}
+
+message BlueOssSidCredentialTypeOss { optional bool notUsed = 1; }
+
+message BlueOssSidCredentialTypeProprietary {
+  required bytes mfgCode = 1
+      [ (nanopb).max_size = 7, (nanopb).fixed_length = true ];
+}
+
+message BlueOssSidCredentialType {
+  required BlueOssCredentialTypeSource typeSource = 1;
+  optional BlueOssSidCredentialTypeOss oss = 2;
+  optional BlueOssSidCredentialTypeProprietary proprietary = 3;
+}
+
+message BlueOssSidFileInfo {
+  required uint32 versionMajor = 1;
+  required uint32 versionMinor = 2;
+  required BlueOssSidCredentialType credentialType = 3;
+  required BlueCredentialId credentialId = 4;
+}
+
+//
+// Full Oss Sid configuration
+//
+
+message BlueOssSidConfiguration { required BlueOssSidFileInfo info = 1; }
+
+//
+// Oss Sid storage profile
+//
+
+message BlueOssSidStorageProfile {
+  required uint32 dataLength = 1;
+  required uint32 fileSize = 2;
+  required uint32 infoDataLength = 3;
+  required uint32 infoFileSize = 4;
+}
+
+//
+// Oss Sid Provisioning
+//
+
+message BlueOssSidProvisioningConfiguration { optional bool notUsed = 1; }
+
+message BlueOssSidProvisioningData {
+  // If not set, uses default from storage
+  optional BlueOssSidProvisioningConfiguration configuration = 1;
+  required BlueOssSidCredentialType credentialType = 2;
+  required BlueCredentialId credentialId = 3;
+}
+
+//
+// Oss Sid mobile
+//
+
+message BlueOssSidMobile {
+  required bytes infoFile = 1 [ (nanopb).max_size = 32 ];
+}
+
+message BlueOssSidMobileProvisioningConfiguration {
+  optional bool notUsed = 1 [ default = false ];
+}
+
+//
+// Oss Sid Mifare
+//
+
+// Default configuration from spec
+message BlueOssSidMifareDesfireProvisioningConfiguration {
+  optional bool notUsed = 1 [ default = false ];
+}
+
+// Demo keys from spec
+message BlueOssSidMifareDesfireConfiguration {
+  // The PICC master key, default is oss sid demo key
+  required bytes piccMasterKey = 1 [
+    (nanopb).max_size = 16,
+    default = "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\xAA"
+  ];
+  // The oss application master key, default is oss sid demo key
+  required bytes appMasterKey = 2 [
+    (nanopb).max_size = 16,
+    default = "\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xAA\xBB\xCC\xDD\xEE\xFF"
+  ];
+  // The oss project read key, default is oss sid demo key
+  required bytes projectKey = 3 [
+    (nanopb).max_size = 16,
+    default = "\xFF\xEE\xDD\xCC\xBB\xAA\x99\x88\x77\x66\x55\x44\x33\x22\x11\x00"
+  ];
+  // The oss application id, default is the oss sid default aid
+  required uint32 aid = 4 [ default = 16076801 ];
+}
+
+//
+// Oss Sid Settings
+//
+
+message BlueOssSidSettings {
+  optional BlueOssSidMifareDesfireConfiguration mifareDesfireConfig = 1;
+}
+
+///////////////////////////////////////////////////////////////////////
+// Oss So Standard
+///////////////////////////////////////////////////////////////////////
+
+message BlueOssSoVersion {
+  optional uint32 versionMajor = 1 [ default = 1 ];
+  optional uint32 versionMinor = 2 [ default = 1 ];
+}
+
+//
+// Oss So Data Types
+//
+
+enum BlueOssSoCredentialTypeOssCredential {
+  Standard = 0;
+  InterventionMedia = 1;
+}
+
+message BlueOssSoCredentialTypeOss {
+  required BlueOssSoCredentialTypeOssCredential credential = 1;
+}
+
+message BlueOssSoCredentialTypeProprietary {
+  required bytes mfgCode = 1
+      [ (nanopb).max_size = 7, (nanopb).fixed_length = true ];
+}
+
+message BlueOssSoCredentialType {
+  required BlueOssCredentialTypeSource typeSource = 1;
+  optional BlueOssSoCredentialTypeOss oss = 2;
+  optional BlueOssSoCredentialTypeProprietary proprietary = 3;
+}
+
+message BlueOssSoDTScheduleDay {
+  // 0  = Monday -> 6 = Sunday (Matches BlueWeekday)
+  repeated bool weekdays = 1
+      [ (nanopb).max_count = 7, (nanopb).fixed_count = true ];
+
+  repeated BlueLocalTimeperiod timePeriods = 8 [ (nanopb).max_count = 4 ];
+}
+
+message BlueOssSoDTSchedule {
+  repeated BlueOssSoDTScheduleDay days = 1 [ (nanopb).max_count = 4 ];
+}
+
+enum BlueOssSoDoorInfoAccessBy {
+  DoorGroupId = 0;
+  DoorId = 1;
+}
+
+message BlueOssSoDoorInfo {
+  required uint32 id = 1;
+  required BlueOssSoDoorInfoAccessBy accessBy = 2;
+  required uint32 dtScheduleNumber = 3;
+  required BlueAccessType accessType = 4;
+}
+
+message BlueOssSoEvent {
+  required BlueLocalTimestamp eventTime = 1;
+  required uint32 doorId = 2;
+  required BlueEventId eventId = 3;
+
+  // If eventId = AccessGranted or AccessDenied -> BlueEventInfoAccess
+  // If eventId = SystemEvent -> BlueEventInfoSystem
+  // Otherwise unused
+  required uint32 eventInfo = 4;
+}
+
+message BlueOssSoExtFeature {
+  required uint32 tag = 1;
+  required bytes value = 2 [ (nanopb).max_size = 64 ];
+}
+
+message BlueOssSoExtFeature_ValidityStart {
+  required bool isValid = 1;
+  required BlueLocalTimestamp validityStartTime = 2;
+}
+
+//
+// Oss So File types
+//
+
+enum BlueOssSoFileId {
+  Info = 0;
+  Data = 1;
+  Event = 2;
+  Blacklist = 3;
+  CustomerExtensions = 4;
+}
+
+message BlueOssSoFileInfo {
+  required uint32 versionMajor = 1;
+  required uint32 versionMinor = 2;
+  required BlueOssSoCredentialType credentialType = 3;
+  required BlueCredentialId credentialId = 4;
+  required uint32 maxEventEntries = 5;
+  required uint32 maxBlacklistEntries = 6;
+}
+
+message BlueOssSoFileData {
+  required BlueLocalTimestamp validity = 1;
+  required uint32 siteId = 2;
+  required uint32 numberOfDayIdsPerDTSchedule = 3;
+  required uint32 numberOfTimePeriodsPerDayId = 4;
+  required bool hasExtensions = 5;
+  repeated BlueOssSoDoorInfo doorInfoEntries = 6 [ (nanopb).max_count = 255 ];
+  repeated BlueOssSoDTSchedule dtSchedules = 7 [ (nanopb).max_count = 15 ];
+}
+
+message BlueOssSoFileEvent {
+  // TODO : max_count must always equal MaxOssSoEventId - 1
+  required bytes supportedEventIds = 1
+      [ (nanopb).max_size = 12, (nanopb).fixed_length = true ];
+  repeated BlueOssSoEvent events = 2 [ (nanopb).max_count = 255 ];
+}
+
+message BlueOssSoFileBlacklist {
+  repeated BlueBlacklistEntry entries = 1 [ (nanopb).max_count = 255 ];
+}
+
+message BlueOssSoFileCustomerExtensions {
+  repeated BlueOssSoExtFeature extFeatures = 1 [ (nanopb).max_count = 8 ];
+
+  //
+  // -- Known features --
+  //
+  optional BlueOssSoExtFeature_ValidityStart validityStart = 2;
+}
+
+//
+// Full Oss So configuration
+//
+
+message BlueOssSoConfiguration {
+  optional BlueOssSoFileInfo info = 1;
+  optional BlueOssSoFileData data = 2;
+  optional BlueOssSoFileEvent event = 3;
+  optional BlueOssSoFileBlacklist blacklist = 4;
+  optional BlueOssSoFileCustomerExtensions customerExtensions = 5;
+}
+
+//
+// Oss So storage profile
+//
+
+message BlueOssSoStorageProfile {
+  required uint32 dataLength = 1;
+  required uint32 fileSize = 2;
+  required uint32 infoDataLength = 3;
+  required uint32 infoFileSize = 4;
+  required uint32 dataDataLength = 5;
+  required uint32 dataFileSize = 6;
+  required uint32 eventDataLength = 7;
+  required uint32 eventFileSize = 8;
+  required uint32 blacklistDataLength = 9;
+  required uint32 blacklistFileSize = 10;
+  required uint32 customerExtensionsDataLength = 11;
+  required uint32 customerExtensionsFileSize = 12;
+}
+
+//
+// Oss So Provisioning
+//
+
+message BlueOssSoProvisioningConfiguration {
+  required uint32 numberOfDoors = 1;
+  required uint32 numberOfDTSchedules = 2;
+  required uint32 numberOfDayIdsPerDTSchedule = 3;
+  required uint32 numberOfTimePeriodsPerDayId = 4;
+  required uint32 numberOfEvents = 5;
+  // TODO : max_count must always equal MaxOssSoEventId - 1
+  required bytes supportedEventIds = 6
+      [ (nanopb).max_size = 12, (nanopb).fixed_length = true ];
+  required uint32 numberOfBlacklistEntries = 7;
+  required uint32 customerExtensionsSize = 8;
+}
+
+message BlueOssSoProvisioningData {
+  // If not set, uses default from storage
+  optional BlueOssSoProvisioningConfiguration configuration = 1;
+  required BlueOssSoCredentialType credentialType = 2;
+  required BlueCredentialId credentialId = 3;
+  required uint32 siteId = 4;
+}
+
+//
+// Oss So Mobile
+//
+
+message BlueOssSoMobile {
+  required bytes infoFile = 1 [ (nanopb).max_size = 32 ];
+  required bytes dataFile = 2 [ (nanopb).max_size = 291 ];      // 1 door
+  required bytes blacklistFile = 3 [ (nanopb).max_size = 257 ]; // 16 items max
+  required bytes customerExtensionsFile = 4 [ (nanopb).max_size = 32 ];
+}
+
+message BlueOssSoMobileProvisioningConfiguration {
+  required uint32 numberOfDoors = 1 [ default = 1 ];
+  required uint32 numberOfDTSchedules = 2 [ default = 1 ];
+  required uint32 numberOfDayIdsPerDTSchedule = 3 [ default = 4 ];
+  required uint32 numberOfTimePeriodsPerDayId = 4 [ default = 4 ];
+  required uint32 numberOfEvents = 5 [ default = 0 ];
+  // TODO : max_count must always equal MaxOssSoEventId - 1
+  required bytes supportedEventIds = 6
+      [ (nanopb).max_size = 12, (nanopb).fixed_length = true ];
+  required uint32 numberOfBlacklistEntries = 7 [ default = 16 ];
+  required uint32 customerExtensionsSize = 8 [ default = 32 ];
+}
+
+//
+// Oss So Mifare
+//
+
+// Default configuration from spec plus customer extensions spacing
+message BlueOssSoMifareDesfireProvisioningConfiguration {
+  required uint32 numberOfDoors = 1 [ default = 70 ];
+  required uint32 numberOfDTSchedules = 2 [ default = 1 ];
+  required uint32 numberOfDayIdsPerDTSchedule = 3 [ default = 4 ];
+  required uint32 numberOfTimePeriodsPerDayId = 4 [ default = 2 ];
+  required uint32 numberOfEvents = 5 [ default = 16 ];
+  // TODO : max_count must always equal MaxOssSoEventId - 1
+  required bytes supportedEventIds = 6 [
+    (nanopb).max_size = 12,
+    (nanopb).fixed_length = true,
+    default = "\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01\x01"
+  ];
+  required uint32 numberOfBlacklistEntries = 7 [ default = 3 ];
+  required uint32 customerExtensionsSize = 8 [ default = 16 ];
+}
+
+// Demo keys from spec
+message BlueOssSoMifareDesfireConfiguration {
+  // The PICC master key, default is oss so demo key
+  required bytes piccMasterKey = 1 [
+    (nanopb).max_size = 16,
+    default = "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\xAA"
+  ];
+  // The oss application master key, default is oss so demo key
+  required bytes appMasterKey = 2 [
+    (nanopb).max_size = 16,
+    default = "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F"
+  ];
+  // The oss project read/write key, default is oss so demo key
+  required bytes projectKey = 3 [
+    (nanopb).max_size = 16,
+    default = "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F"
+  ];
+  // The oss application id, default is the oss so default aid
+  required uint32 aid = 4 [ default = 16076800 ];
+}
+
+//
+// Oss So Settings
+//
+
+message BlueOssSoSettings {
+  optional BlueOssSoMifareDesfireConfiguration mifareDesfireConfig = 1;
+}
+
+///////////////////////////////////////////////////////////////////////
+// Test types
+///////////////////////////////////////////////////////////////////////
+
+message _BlueTestEncodeDecode {
+  required string vendor = 1 [ (nanopb).max_length = 32 ];
+  required string hardware_name = 2 [ (nanopb).max_length = 32 ];
+  required int32 hardware_version = 3;
+  required int32 application_version = 4;
+}