tokens: ['The', 'following', 'clause', 'illustrates', 'the', 'message', 'flow', 'between', 'the', 'two', 'SEPPs', 'with', 'modifications', 'from', 'cIPX', 'and', 'pIPX', 'Figure', '', 'Message', 'flow', 'between', 'two', 'SEPPs', '', 'The', 'cSEPP', 'receives', 'an', 'HTTP', 'request', 'message', 'from', 'a', 'network', 'function', 'If', 'the', 'message', 'contains', 'a', 'telescopic', 'FQDN', 'the', 'cSEPP', 'removes', 'its', 'domain', 'name', 'from', 'this', 'FQDN', 'to', 'obtain', 'the', 'original', 'FQDN', 'as', 'described', 'in', 'clause', '', '', 'The', 'cSEPP', 'shall', 'reformate', 'the', 'HTTP', 'Request', 'message', 'as', 'follows', 'a', 'The', 'cSEPP', 'shall', 'generate', 'blocks', 'JSON', 'objects', 'for', 'integrity', 'protected', 'data', 'and', 'encrypted', 'data', 'and', 'protecting', 'them', 'The', 'cSEPP', 'shall', 'encapsulate', 'the', 'HTTP', 'request', 'into', 'a', 'clearTextEncapsulatedMessage', 'block', 'containing', 'the', 'following', 'child', 'JSON', 'objects', '', 'PseudoHeaders', '', 'HTTPHeaders', 'with', 'one', 'element', 'per', 'header', 'of', 'the', 'original', 'request', '', 'Payload', 'that', 'contains', 'the', 'message', 'body', 'of', 'the', 'original', 'request', 'For', 'each', 'attribute', 'that', 'require', 'endtoend', 'encryption', 'between', 'the', 'two', 'SEPPs', 'the', 'attribute', 'value', 'is', 'copied', 'into', 'a', 'dataToIntegrityProtectAndCipher', 'JSON', 'object', 'and', 'the', 'attributes', 'value', 'in', 'the', 'clearTextEncapsulatedMessage', 'is', 'replaced', 'by', 'the', 'index', 'of', 'attribute', 'value', 'in', 'the', 'dataToIntegrityProtectAndCipher', 'block', 'The', 'cSEPP', 'shall', 'create', 'a', 'metadata', 'block', 'that', 'contains', 'the', 'Nf', 'context', 'ID', 'message', 'ID', 'generated', 'by', 'the', 'cSEPP', 'for', 'this', 'requestresponse', 'transaction', 'and', 'next', 'hop', 'identity', 'The', 'cSEPP', 'shall', 'protect', 'the', 'dataToIntegrityProtect', 'block', 'and', 'the', 'dataToIntegrityProtectAndCipher', 'block', 'as', 'per', 'clause', '', 'This', 'results', 'in', 'a', 'single', 'JWE', 'object', 'representing', 'the', 'protected', 'HTTP', 'Request', 'message', 'b', 'The', 'cSEPP', 'shall', 'generate', 'payload', 'for', 'the', 'SEPP', 'to', 'SEPP', 'HTTP', 'message', 'The', 'JWE', 'object', 'becomes', 'the', 'payload', 'of', 'the', 'new', 'HTTP', 'message', 'generated', 'by', 'cSEPP', '', 'The', 'cSEPP', 'shall', 'use', 'HTTP', 'POST', 'to', 'send', 'the', 'HTTP', 'message', 'to', 'the', 'first', 'Roaming', 'Intermediary', '', 'The', 'first', 'Roaming', 'Intermediary', 'eg', 'visited', 'networks', 'IPX', 'provider', 'shall', 'create', 'a', 'new', 'modifiedDataToIntegrityProtect', 'JSON', 'object', 'with', 'three', 'elements', 'a', 'The', 'Operations', 'JSON', 'patch', 'document', 'contains', 'modifications', 'performed', 'by', 'the', 'first', 'Roaming', 'Intermediary', 'as', 'per', 'RFC', '', '', 'b', 'The', 'first', 'Roaming', 'Intermediary', 'shall', 'include', 'its', 'own', 'identity', 'in', 'the', 'Identity', 'field', 'of', 'the', 'modifiedDataToIntegrityProtect', 'c', 'The', 'first', 'Roaming', 'Intermediary', 'shall', 'copy', 'the', 'tag', 'element', 'present', 'in', 'the', 'JWE', 'object', 'generated', 'by', 'the', 'cSEPP', 'into', 'the', 'modifiedDataToIntegrityProtect', 'object', 'This', 'acts', 'as', 'a', 'replay', 'protection', 'for', 'updates', 'made', 'by', 'the', 'first', 'Roaming', 'Intermediary', 'The', 'Roaming', 'Intermediary', 'shall', 'execute', 'JWS', 'on', 'the', 'modifiedDataToIntegrityProtect', 'JSON', 'object', 'and', 'append', 'the', 'resulting', 'JWS', 'object', 'to', 'the', 'message', '', 'The', 'first', 'Roaming', 'Intermediary', 'shall', 'send', 'the', 'modified', 'HTTP', 'message', 'request', 'to', 'the', 'second', 'Roaming', 'Intermediary', 'eg', 'home', 'networks', 'IPX', 'as', 'in', 'step', '', '', 'The', 'second', 'Roaming', 'Intermediary', 'shall', 'perform', 'further', 'modifications', 'as', 'in', 'step', '', 'if', 'required', 'The', 'second', 'Roaming', 'Intermediary', 'shall', 'further', 'execute', 'JWS', 'on', 'the', 'modifiedDataToIntegrityProtect', 'JSON', 'object', 'and', 'shall', 'append', 'the', 'resulting', 'JWS', 'object', 'to', 'the', 'message', '', 'The', 'second', 'Roaming', 'Intermediary', 'shall', 'send', 'the', 'modified', 'HTTP', 'message', 'to', 'the', 'pSEPP', 'as', 'in', 'step', '', 'NOTE', '', 'The', 'behaviour', 'of', 'the', 'Roaming', 'Intermediaries', 'is', 'not', 'normative', 'but', 'the', 'pSEPP', 'assumes', 'that', 'behaviour', 'for', 'processing', 'the', 'resulting', 'request', '', 'The', 'pSEPP', 'receives', 'the', 'message', 'and', 'shall', 'perform', 'the', 'following', 'actions', '', 'The', 'pSEPP', 'extracts', 'the', 'serialized', 'values', 'from', 'the', 'components', 'of', 'the', 'JWE', 'object', '', 'The', 'pSEPP', 'invokes', 'the', 'JWE', 'AEAD', 'algorithm', 'to', 'check', 'the', 'integrity', 'of', 'the', 'message', 'and', 'decrypt', 'the', 'dataToIntegrityProtectAndCipher', 'block', 'This', 'results', 'in', 'entries', 'in', 'the', 'encrypted', 'block', 'becoming', 'visible', 'in', 'cleartext', '', 'The', 'pSEPP', 'updates', 'the', 'clearTextEncapsulationMessage', 'block', 'in', 'the', 'message', 'by', 'replacing', 'the', 'references', 'to', 'the', 'dataToIntegrityProtectAndCipher', 'block', 'with', 'the', 'referenced', 'decrypted', 'values', 'from', 'the', 'dataToIntegrityProtectAndCipher', 'block', '', 'The', 'pSEPP', 'then', 'verifies', 'IPX', 'provider', 'updates', 'of', 'the', 'attributes', 'in', 'the', 'modificationsArray', 'It', 'checks', 'whether', 'the', 'modifications', 'performed', 'by', 'the', 'Roaming', 'Intermediaries', 'were', 'permitted', 'by', 'policy', 'The', 'pSEPP', 'further', 'verifies', 'that', 'the', 'PLMNID', 'contained', 'in', 'the', 'message', 'is', 'equal', 'to', 'the', 'Remote', 'PLMNID', 'in', 'the', 'related', 'Nf', 'context', '', 'The', 'pSEPP', 'updates', 'the', 'modified', 'values', 'of', 'the', 'attributes', 'in', 'the', 'clearTextEncapsulationMessage', 'in', 'order', 'The', 'pSEPP', 'shall', 'reassemble', 'the', 'full', 'HTTP', 'Request', 'from', 'the', 'contents', 'of', 'the', 'clearTextEncapsulationMessage', '', 'The', 'pSEPP', 'shall', 'send', 'the', 'HTTP', 'request', 'resulting', 'from', 'step', '', 'to', 'the', 'home', 'networks', 'NF', '', 'These', 'steps', 'are', 'analogous', 'to', 'steps', '']