💻 Server

💻 Client

1 Prepare canonical consent JSON (JCS) Canonical bytes created

2 Compute hash of canonical bytes H_s = SHA256(canonical bytes)

3 Send canonical consent JSON and hash

4 Display consent notice to user

5.1 Compute hash of presented JSON H_c = SHA256(JCS_Presented)

5.2 Sign hash with user private key signature_b64 = Sign(H_c)

5.3 Send signature, algorithm, public key fingerprint, canonical JSON

6 Abort consent process if user declines

💻 Server

💻 Client