This is an HTML version of an attachment to the Freedom of Information request 'Vote Secrecy in 2020 Election'.

OSEV Authentication Process
Sequence Diagram
v0.6.2 2020-04-15
Authentication
OSEV
and Identification
OSEV Verify
OSEV Check
Web Application
Provider
Applicant/Voter
Enter OSEV Portal
Redirect user to Auth System
Authenticate and provide 
identity documents
Redirect user to OSEV
Authenticate (AccessToken and IdentityProviderSubject)
Verifies token signature using standard SSO
protocol.
CheckRegistrationStatus (IdentityProviderSubject)
CheckRegistrationStatus (IdentityProviderSubject)
Get existing
IdentityProviderSubject
record or save the new
IdentityProviderSubject.
Generate and save or get
existing VoterToken.
Response: (VoterToken, 
IsAlreadyRegisteredForOSEV)
If already registered, get existing regToken.
and get VotedUsingOSEV status 
OR
Save VoterToken and
Generate and save RegistrationToken
(RegToken) with VoterToken
Response: (RegToken, 
IsAlreadyRegisteredForOSEV,
hasAlreadyVotedUsingOSEV)
A) If not already registered:
You can now register here ...
go to registration sequence. 
B) If not already voted:
You can now vote here ...
go to voting sequence. 
C) if already voted:
Thanks your vote has been submitted.
For more information go here.