# MOSIP Partner Secure Communication

## Introduction

MOSIP and Partners communicate with each other when indviduals avail services of Partners. The communication must to be executed safely and securely.

* Confidential: The communication should be confidential and no other parties should be able to eaves drop the communicated details.
* Integrity: The integrity of the communication should be maintained.

## Security at various levels

### Network Layer

* All communication from Partners to MOSIP is routed via the MISP.
* The communication is protected via the secured network protocol suite of IPSec.

![Network communications](/files/-M1R7YAZ9D6KDX6ZMf-5)

### Presentation Layer

Process flow for communication at Presentation Layer:

1. Partner pings MOSIP.
2. Partner gets the MOSIP certificate which is signed by the Root CA.
3. Partner then verifies the MOSIP certificate with the Root CA.
4. Once validated, the Partner shares its SSL certificate to the MOSIP. This SSL certificate is already signed by MOSIP as Root CA.
5. MOSIP verifies the SSL certificate.
6. Once both the SSL certificates are validated, the communication channel is established and communication happens.

![Communication diagram](/files/-M1R7YAahRwgXFORDSG1)

### Application Layer - Encryption

1. The data is encrypted in the Application Layer itself before it gets into the Presentation Layer.
2. The Encryption certificate is shared across by both the parties (MOSIP & Partners) to decrypt the content.

![Communication diagram](/files/-M1R7YAcYYIzXPFmlra_)

### Application Layer - Digital signature

1. Both the parties (MOSIP and Partner) have to sign the request and response in the communication.
2. Partner signs request and response using Partner's signature certificate. MOSIP can verify the signature using Partner's public key.
3. MOSIP signs request and response using MOSIP signature certificate. Partner can verify signature using MOSIP's public key.

![Communication diagram](/files/-M1R7YAeMjpis6Fo3Rgv)

### Certificates used

Altogether, 3 certificates are used in the communication:

1. SSL certificate: Used in the Presentation Layer
2. Encryption certificate: Used in the Application Layer
3. Signature certificate: Used in the Application Layer


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.mosip.io/1.1.5/modules/partner-management/mosip-partner-secure-communication.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.