From 4e9ec89b041cbd430099cbd2a0e36d56f64a5ae1 Mon Sep 17 00:00:00 2001 From: ankraft <an.kraft@gmail.com> Date: Tue, 1 Apr 2025 12:47:23 +0200 Subject: [PATCH] First conversion. Renaming images to their figure numbers --- TS-0022-Field_Device_Configuration.md | 1768 +++++++++++-------------- media/{image2.png => 6_1_1.png} | Bin media/{image3.png => 8_1_2_1.png} | Bin media/{image3.svg => 8_1_2_1.svg} | 0 media/{image4.png => 8_1_3_2_1.png} | Bin media/{image4.svg => 8_1_3_2_1.svg} | 0 media/{image5.png => 8_1_3_3_1.png} | Bin media/{image5.svg => 8_1_3_3_1.svg} | 0 media/{image6.png => 8_1_3_4_1.png} | Bin media/{image6.svg => 8_1_3_4_1.svg} | 0 media/{image7.png => 8_2_1.png} | Bin media/{image7.svg => 8_2_1.svg} | 0 media/image1.png | Bin 4826 -> 0 bytes media/image3.emf | Bin 49564 -> 0 bytes media/image4.emf | Bin 50308 -> 0 bytes media/image5.emf | Bin 61784 -> 0 bytes media/image6.emf | Bin 75224 -> 0 bytes media/image7.emf | Bin 25052 -> 0 bytes 18 files changed, 784 insertions(+), 984 deletions(-) rename media/{image2.png => 6_1_1.png} (100%) rename media/{image3.png => 8_1_2_1.png} (100%) rename media/{image3.svg => 8_1_2_1.svg} (100%) rename media/{image4.png => 8_1_3_2_1.png} (100%) rename media/{image4.svg => 8_1_3_2_1.svg} (100%) rename media/{image5.png => 8_1_3_3_1.png} (100%) rename media/{image5.svg => 8_1_3_3_1.svg} (100%) rename media/{image6.png => 8_1_3_4_1.png} (100%) rename media/{image6.svg => 8_1_3_4_1.svg} (100%) rename media/{image7.png => 8_2_1.png} (100%) rename media/{image7.svg => 8_2_1.svg} (100%) delete mode 100644 media/image1.png delete mode 100644 media/image3.emf delete mode 100644 media/image4.emf delete mode 100644 media/image5.emf delete mode 100644 media/image6.emf delete mode 100644 media/image7.emf diff --git a/TS-0022-Field_Device_Configuration.md b/TS-0022-Field_Device_Configuration.md index 9b69c0b..478f5f1 100644 --- a/TS-0022-Field_Device_Configuration.md +++ b/TS-0022-Field_Device_Configuration.md @@ -1,21 +1,12 @@ - - - - - - - - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> + +---------------------------------------------------+------------------------------------+ -| **oneM2M**\ | -| **Technical** **Specification** | +| oneM2M\ | +| Technical Specification | +:==================================================+:===================================+ | Document Number | TS-0022-V5\_1\_0 | +---------------------------------------------------+------------------------------------+ -| Document Name: | Field Device Configuration\ | -| | | +| Document Name: | Field Device Configuration | +---------------------------------------------------+------------------------------------+ | Date: | 2024-12-24 | +---------------------------------------------------+------------------------------------+ @@ -25,25 +16,12 @@ +---------------------------------------------------+------------------------------------+ - - - - - - - - - - The present document is provided for future development work within oneM2M only. The Partners accept no liability for any use of this specification. The present document has not been subject to any approval process by the oneM2M Partners Type 1. Published oneM2M specifications and reports for implementation should be obtained via the oneM2M Partners' Publications Offices. - - - -<br />About oneM2M +About oneM2M The purpose and goal of oneM2M is to develop technical specifications which address the need for a common M2M Service Layer that can be readily embedded within various hardware and software, and relied upon to connect the myriad of devices in the field with M2M application servers worldwide. @@ -57,8 +35,6 @@ All rights reserved. The copyright extends to reproduction in all media. - - Notice of Disclaimer & Limitation of Liability The information provided in this document is directed solely to professionals who have the appropriate degree of experience to understand and interpret its contents in accordance with generally accepted engineering or other professional standards and applicable regulations. No recommendation as to products or vendors is made or should be implied. @@ -69,8 +45,8 @@ NO REPRESENTATION OR WARRANTY IS MADE THAT THE INFORMATION IS TECHNICALLY ACCURA # Contents - # 1 Scope + The present document specifies the architectural options, resources and procedures needed to pre-provision and maintain devices in the Field Domain (e.g. ADN, ASN/MN) in order to establish M2M Service Layer operation between the device's AE and/or CSE and a Registrar and/Hosting CSE. The resources and procedures includes information about the Registrar CSE and/or Hosting CSE needed by the AE or CSE to begin M2M Service Layer operation. @@ -90,27 +66,27 @@ The following referenced documents are necessary for the application of the pres - <a name="_ref_6">[6]</a> oneM2M TS-0006: "Management Enablement (BBF)". - <a name="_ref_7">[7]</a> IETF RFC 6920: "Naming Things with Hashes". - <a name="_ref_8">[8]</a> IANA Transport Layer Security (TLS) Parameters. -> NOTE: Available at [http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml](http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml). +> NOTE: Available at [http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml](http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml). - <a name="_ref_9">[9]</a> oneM2M TS-0032: "MAF and MEF Interface Specification". - <a name="_ref_10">[10]</a> FIPS PUB 180-4: "Secure Hash Standard (SHS)". > NOTE: Available at [http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf](http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf). - <a name="_ref_11">[11]</a> OMA LightweightM2M (LwM2M) Object and Resource Registry - Connection Monitoring -`NOTE: Available at https://technical.openmobilealliance.org/OMNA/LwM2M/LwM2MRegistry.html <a href="#_ref_12">[12]</a> 3GPP Specification #: 44.018 - Mobile radio interface layer 3 specification; GSM/EDGE Radio Resource Control (RRC) protocol` -`NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2686 <a href="#_ref_13">[13]</a> 3GPP Specification #: 36.214 - Evolved Universal Terrestrial Radio Access (E-UTRA); Physical layer; Measurements` -`NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2428` +>NOTE: Available at https://technical.openmobilealliance.org/OMNA/LwM2M/LwM2MRegistry.html <a href="#_ref_12">[12]</a> 3GPP Specification #: 44.018 - Mobile radio interface layer 3 specification; GSM/EDGE Radio Resource Control (RRC) protocol +>NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2686 <a href="#_ref_13">[13]</a> 3GPP Specification #: 36.214 - Evolved Universal Terrestrial Radio Access (E-UTRA); Physical layer; Measurements +>NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2428 - <a name="_ref_14">[14]</a> 3GPP Specification #: 23.003 - Numbering, addressing and identification -`NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=729` +NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=729 - <a name="_ref_15">[15]</a> 3GPP Specification #: 24.008 - Mobile radio interface Layer 3 specification; Core network protocols; Stage 3 -`NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=1015` +>NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=1015 - <a name="_ref_16">[16]</a> 3GPP Specification #: 36.331 - Evolved Universal Terrestrial Radio Access (E-UTRA); Radio Resource Control (RRC); Protocol specification -`NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2440` +>NOTE: Available at https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2440 - <a name="_ref_17">[17]</a> 3GPP Specification #: 36.213 - Evolved Universal Terrestrial Radio Access (E-UTRA); Physical layer procedures -`NOTE: Available at [https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2427](https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2427)` +>NOTE: Available at [https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2427](https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=2427) - <a name="_ref_18">[18]</a> ETSI TS 102 221: "Smart Cards; UICC-Terminal interface; Physical and logical characteristics" -`NOTE: Available at https://www.etsi.org/deliver/etsi\_ts/102200\_102299/102221/15.00.00\_60/ts\_102221v150000p.pdf` -> +>NOTE: Available at https://www.etsi.org/deliver/etsi_ts/102200_102299/102221/15.00.00_60/ts_102221v150000p.pdf + ## 2.2 Informative references @@ -118,10 +94,8 @@ References are either specific (identified by date of publication and/or edition The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area. - - <a name="_ref_i.1">[i.1]</a> oneM2M Drafting Rules. -> NOTE: Available at [http://www.onem2m.org/images/files/oneM2M-Drafting-Rules.pdf](http://www.onem2m.org/images/files/oneM2M-Drafting-Rules.pdf). - + > NOTE: Available at [http://www.onem2m.org/images/files/oneM2M-Drafting-Rules.pdf](http://www.onem2m.org/images/files/oneM2M-Drafting-Rules.pdf). - <a name="_ref_i.2">[i.2]</a> Broadband Forum TR-069: "CPE WAN Management Protocol Issue": 1 Amendment 5, November 2013. - <a name="_ref_i.3">[i.3]</a> OMA-DM: "OMA Device Management Protocol", Version 1.3, Open Mobile Alliance. - <a name="_ref_i.4">[i.4]</a> LWM2M: "OMA LightweightM2M", Version 1.0, Open Mobile Alliance. @@ -132,21 +106,16 @@ The following referenced documents are not necessary for the application of the For the purposes of the present document, the terms given in oneM2M TS-0011 <a href="#_ref_1">[1]</a> and oneM2M TS0001 <a href="#_ref_2">[2]</a> and the following apply: -**a** **pplication** **c** **onfiguration** **:** procedure that configures an AE on an M2M Node in the Field Domain for M2M Service Layer operation - -**a** **uthentication** **p** **rofile** **:** security information needed to establish mutually-authenticated secure communications - -**c** **onfigur** **ation** **AE** **:** AE whose role is to configure the M2M System, including the M2M Node in the Field Domain +**application configuration** : procedure that configures an AE on an M2M Node in the Field Domain for M2M Service Layer operation +**authentication profile** : security information needed to establish mutually-authenticated secure communications +**configuration AE** : AE whose role is to configure the M2M System, including the M2M Node in the Field Domain +**configuration IPE** : IPE that provides the capability to configure the M2M Node in the Field Domain by interworking the exchange of information between the M2M Node and the M2M System +**credential object** : end-point of a security protocol +**(oneM2M) security principal** : CSE or AE or Node or M2M Device which can be authenticated -**c** **onfiguration** **IPE** **:** IPE that provides the capability to configure the M2M Node in the Field Domain by interworking the exchange of information between the M2M Node and the M2M System +> NOTE: When the Security Principal is a Node or M2M Device, then Node or M2M Device is acting on behalf of the CSE and/or AE executing on the Node or M2M Device. -**c** **redential** **object:** end-point of a security protocol - -**(oneM2M) security principal** **:** CSE or AE or Node or M2M Device which can be authenticated - -> NOTE: When the Security Principal is a Node or M2M Device, then Node or M2M Device is acting on behalf of the CSE and/or AE executing on the Node or M2M Device. - -**s** **ervice** **l** **ayer** **c** **onfiguration** **:** procedure that configures a CSE on an M2M Node in the Field Domain for M2M Service Layer operation +**service layer configuration** : procedure that configures a CSE on an M2M Node in the Field Domain for M2M Service Layer operation ## 3.2 Symbols @@ -156,7 +125,6 @@ Void. ## 3.3 Abbreviations For the purposes of the present document, the abbreviations given in oneM2M TS-0011 <a href="#_ref_1">[1]</a>, oneM2M TS-0001 <a href="#_ref_2">[2]</a> and the following apply: - `NP Not Present` `XML eXtensible Markup Language` `XSD XML Schema Definition` @@ -167,8 +135,8 @@ The key words "Shall", "Shall not", "May", "Need not", "Should", "Should not" in # 5 Introduction -Devices in the Field Domain that host oneM2M AEs and CSEs require configuration that permits the AE or CSE to successfully operate in the M2M Service Layer. oneM2M TS-0001 <a href="#_ref_2">[2]</a> and oneM2M TS-0003 <a href="#_ref_3">[3]</a> specifies much of what is needed to configure these devices in the Field Domain (i.e. ADN, ASN/MN). Specifically, oneM2M TS0001 <a href="#_ref_2">[2]</a> provides: +Devices in the Field Domain that host oneM2M AEs and CSEs require configuration that permits the AE or CSE to successfully operate in the M2M Service Layer. oneM2M TS-0001 <a href="#_ref_2">[2]</a> and oneM2M TS-0003 <a href="#_ref_3">[3]</a> specifies much of what is needed to configure these devices in the Field Domain (i.e. ADN, ASN/MN). Specifically, oneM2M TS0001 <a href="#_ref_2">[2]</a> provides: - Guidance on how a CSE is minimally provisioned in Annex E of the specification including how a user AE is established within a Hosting CSE. - Specification of the general communication flows across the Mca and Mcc reference points in clause 8. @@ -186,30 +154,28 @@ The present document specifies the additional architectural elements, resources ## 6.1 Introduction The information needed by the remote AE or CSE in the field domain to establish M2M Service Layer operation uses the architectural aspects of oneM2M TS-0001 <a href="#_ref_2">[2]</a> in order to convey the information elements to the ASN/MN or ADN nodes that host the AE or CSE prior to or during M2M Service Layer operation and to the AE or CSE during M2M Service Layer operation. - - + **Figure 6.1-1: Architectural Aspects for Configuration of ASN/MN and ADN Nodes** Figure 6.1-1 depicts three (3) methods, in which ADN or ASN/MN nodes are configured using the following: - -1. Device Management technologies using the mc reference point defined in clause 6 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. Using this method, the information that is used to configure the ASN/MN or ADN is described as <_mgmtObj_ > resource types that are hosted in the IN-CSE. +1. Device Management technologies using the mc reference point defined in clause 6 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. Using this method, the information that is used to configure the ASN/MN or ADN is described as _<mgmtObj>_ resource types that are hosted in the IN-CSE. 1. oneM2M Mcc and Mca reference point when M2M Service Layer operation has been established to the AE or CSE. Establishment of the M2M Service Layer operation includes actions such as setting up security associations and registration of the M2M entities as per oneM2M TS-0003 <a href="#_ref_3">[3]</a> and oneM2M TS-0001 <a href="#_ref_2">[2]</a>. -1. To convey the information elements to the ASN/MN nodes that have established M2M Service Layer operation via Mcc reference points, resource announcement mechanism may be used. In this case, the CSE in the ASN/MN node stores the copy of the <mgmtObj> resource as a <mgmtObj_Annc_ > resource as shown in the figure 6.1-1. +1. To convey the information elements to the ASN/MN nodes that have established M2M Service Layer operation via Mcc reference points, resource announcement mechanism may be used. In this case, the CSE in the ASN/MN node stores the copy of the <mgmtObj> resource as a _<mgmtObj_Annc>_ resource as shown in the figure 6.1-1. 1. oneM2M IPE technology where the IPE interworks the information exchange between the ADN and ASN/MN and the IN-CSE. This type of IPE is called a Configuration IPE in order to depict the role and capabilities of the IPE related to the present document. -> NOTE: The reference point between the Configuration IPE and the ADN and ASN/MN is unspecified in the present document. + > NOTE: The reference point between the Configuration IPE and the ADN and ASN/MN is unspecified in the present document. In addition, figure 6.1-1 introduces an AE whose role is to configure the IN-CSE and nodes in the Field Domain with the information needed to establish M2M Service Layer operation. This type of AE is called a Configuration AE in order to depict the role and capabilities of the AE related to the present document. -The information that is used to configure the ASN/MN or ADN is described as <_mgmtObj_ > resource types that are hosted in the IN-CSE. +The information that is used to configure the ASN/MN or ADN is described as _<mgmtObj>_ resource types that are hosted in the IN-CSE. ## 6.2 Information needed for M2M Service Layer operation ### 6.2.1 Introduction -The Configuration AE provisions the <_mgmtObj_ > resource types in the IN-CSE and the IN-CSE then interacts with the DM Server, ADN or ASN/MN node or Configuration IPE in order to configure the AE or CSE on the nodes. +The Configuration AE provisions the _<mgmtObj>_ resource types in the IN-CSE and the IN-CSE then interacts with the DM Server, ADN or ASN/MN node or Configuration IPE in order to configure the AE or CSE on the nodes. ### 6.2.2 Information elements required for M2M Service Layer operation @@ -221,7 +187,6 @@ The ASN/MN and ADN in the Field Domain should support the capability to be confi #### 6.2.2.2 M2M Service Layer registration information elements The information elements used for CSE or AEs to register with a Registrar CSE shall include the following information which depends on the M2M Service Provider: - - PoA information of Registrar CSE. - Protocol binding to be used between AE or CSE and the Registrar CSE. - CSE-ID of the CSE hosted on the ASN/MN. @@ -277,12 +242,12 @@ The MEF Client registration configuration information elements configure the sec ## 7.1 <mgmtObj> Resource type specializations ### 7.1.1 Introduction -The present clause specifies <_mgmtObj_ > resource specializations used to configure AEs or CSEs on ADN or ASN/MN nodes in the Field Domain in order to establish M2M Service Layer operation. +The present clause specifies _<mgmtObj>_ resource specializations used to configure AEs or CSEs on ADN or ASN/MN nodes in the Field Domain in order to establish M2M Service Layer operation. -Table 7.1.1-1 shows a summary of <_mgmtObj_ > resource specializations defined in the present document. +Table 7.1.1-1 shows a summary of _<mgmtObj>_ resource specializations defined in the present document. -**Table 7.1.1-1: Summary of defined <_mgmtObj_ > resources**<a name="table_7.1.1-1"></a> +**Table 7.1.1-1: Summary of defined _<mgmtObj>_ resources**<a name="table_7.1.1-1"></a> |mgmtObj |mgmtDefinition |Intended use |Note | |-|-|-|-| @@ -300,183 +265,173 @@ Table 7.1.1-1 shows a summary of <_mgmtObj_ > resource specializations define |mobileNetwork |1031 |To store information about the currently connected mobile network. | | - - ### 7.1.2 Resource [registration] -This specialization of <_mgmtObj_ > is used to convey the service layer configuration information needed to register an AE or CSE with a Registrar CSE. +This specialization of _<mgmtObj>_ is used to convey the service layer configuration information needed to register an AE or CSE with a Registrar CSE. -The [_registration_ ] resource shall contain the child resource specified in table 7.1.2-1. +The _[registration]_ resource shall contain the child resource specified in table 7.1.2-1. **Table 7.1.2-1: Child resources of _[registration]_ resource**<a name="table_7.1.2-1"></a> -|**Child Resources of** **_[registration]_** |**Child Resource Type** |**Multiplicity** |**Description** | +|Child Resources of _[registration]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | - -The [_registration_ ] resource shall contain the attributes specified in table 7.1.2-2. - - -**Table 7.1.2-2: Attributes of _[registration_ _]_ resource**<a name="table_7.1.2-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| **Attributes of** \ | **Multiplicity** | **RW/**\ | **Description** | -| **_[_** **_registration_** **_]_** | | **RO/**\ | | -| | | **WO** | | -+:================================================================================+:===================+:===================================+:==========================================================================================================================================================================================================================================================================================+ -| _resourceType_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _resourceID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _resourceName_ | 1 | WO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _parentID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _expirationTime_ | 1 | RW | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _accessControlPolicyIDs_ | 0..1 (L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _creationTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _lastModifiedTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _labels_ | 0..1(L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _mgmtDefinition_ | 1 | WO | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. This attribute shall have the fixed value 1020 ("registration"). | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _object_ _IDs_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _objectPaths_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _description_ | 0..1 | RW | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _originatorID_ | 0..1 | RW | CSE-ID of the CSE hosted on the ASN/MN or the AE-ID of an AE hosted on an ASN/MN or ADN node.\ | -| | | | If the setting is for a CSE, then this attribute shall be present. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _pointOfAccess_ | 0..1(L) | RW | The point of access URI of the Registrar CSE. It represents the list of physical address used by AE/CSEs to connect to registrar CSE.\ | -| | | | EXAMPLE:\ | -| | | | http://172.25.0.10:8080/xyz\ | -| | | | coap://m2m.sp.com:5683\ | -| | | | mqtt://172.25.0.10:1883\ | -| | | | ws://10.222.254.26:80\ | -| | | | See note. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _CSEBase_ | 0..1 | RW | The resource identifier of the <_CSEBase_ _>_ resource representing Registrar CSE. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _CSE_ _-_ _ID_ | 0..1 | RW | The CSE identifier of Registrar CSEin SP-relative CSE-ID format. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _appID_ | 0..1 | RW | The App-ID of an AE. This attribute shall only be present when this resource is used for the registration of an AE. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _externalID_ | 0..1 | RW | The M2M-Ext-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _T_ _rigger_ _-_ _Recipient_ _-_ _ID_ | 0..1 | RW | The Trigger-Recipient-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _mgmtLink_ | 0..1 | RW | A link to a <_mgmtObj_ > resource instance containing the information for establishing a security association with the Registrar CSE. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| M2M-Sub-ID | 0..1 | WO | The identifier assigned by the M2M Service Provider for the M2M Service Subscription of the registree. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| NOTE: Protocol binding is determined from the protocol schema in this URI. | -+---------------------------------------------------------------------------------+--------------------+------------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - +The _[registration]_ resource shall contain the attributes specified in table 7.1.2-2. + + +**Table 7.1.2-2: Attributes of _[registration]_ resource**<a name="table_7.1.2-2"></a> + + ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| Attributes of \ | Multiplicity | RW/\ | Description | +| _[registration]_ | | RO/\ | | +| | | WO | | ++:==========================+:=============+:=======+:================================================================================================================================================================================================================================================+ +| _resourceType_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _resourceID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _resourceName_ | 1 | WO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _parentID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _expirationTime_ | 1 | RW | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _accessControlPolicyIDs_ | 0..1 (L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _creationTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _lastModifiedTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _labels_ | 0..1(L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _mgmtDefinition_ | 1 | WO | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). This attribute shall have the fixed value 1020 ("registration"). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _objectIDs_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _objectPaths_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _description_ | 0..1 | RW | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _originatorID_ | 0..1 | RW | CSE-ID of the CSE hosted on the ASN/MN or the AE-ID of an AE hosted on an ASN/MN or ADN node.\ | +| | | | If the setting is for a CSE, then this attribute shall be present. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _pointOfAccess_ | 0..1(L) | RW | The point of access URI of the Registrar CSE. It represents the list of physical address used by AE/CSEs to connect to registrar CSE.\ | +| | | | EXAMPLE:\ | +| | | | http://172.25.0.10:8080/xyz\ | +| | | | coap://m2m.sp.com:5683\ | +| | | | mqtt://172.25.0.10:1883\ | +| | | | ws://10.222.254.26:80\ | +| | | | See note. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _CSEBase_ | 0..1 | RW | The resource identifier of the _<CSEBase>_ resource representing Registrar CSE. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _CSE-ID_ | 0..1 | RW | The CSE identifier of Registrar CSEin SP-relative CSE-ID format. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _appID_ | 0..1 | RW | The App-ID of an AE. This attribute shall only be present when this resource is used for the registration of an AE. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _externalID_ | 0..1 | RW | The M2M-Ext-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _Trigger-Recipient-ID_ | 0..1 | RW | The Trigger-Recipient-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _mgmtLink_ | 0..1 | RW | A link to a _<mgmtObj>_ resource instance containing the information for establishing a security association with the Registrar CSE. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| M2M-Sub-ID | 0..1 | WO | The identifier assigned by the M2M Service Provider for the M2M Service Subscription of the registree. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| NOTE: Protocol binding is determined from the protocol schema in this URI. | ++---------------------------+--------------+--------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ ### 7.1.3 Resource [dataCollection] -This specialization of <_mgmtObj_ > is used to convey the application configuration information needed by an AE to collect data and then transmit the data to a Hosting CSE. +This specialization of _<mgmtObj>_ is used to convey the application configuration information needed by an AE to collect data and then transmit the data to a Hosting CSE. -The [_dataCollection_ ] resource shall contain the child resource specified in table 7.1.3-1. +The _[dataCollection]_ resource shall contain the child resource specified in table 7.1.3-1. -**Table 7.1.3-1: Child resources of _[_ _dataCollection_ _]_ resource**<a name="table_7.1.3-1"></a> +**Table 7.1.3-1: Child resources of _[dataCollection]_ resource**<a name="table_7.1.3-1"></a> -|**Child Resources of** **_[_** **_dataCollection_** **_]_** |**Child Resource Type** |**Multiplicity** |**Description** | +|Child Resources of _[dataCollection]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | - -The [_dataCollection_ ] resource shall contain the attributes specified in table 7.1.3-2. - - -**Table 7.1.3-2: Attributes of _[_ _dataCollection_ _]_ resource**<a name="table_7.1.3-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| **Attributes of** \ | **Multiplicity** | **RW/**\ | **Description** | -| **_[_** **_dataCollection_** **_]_** | | **RO/**\ | | -| | | **WO** | | -+:==================================================================================================================================================================+:===================+:===================================+:==================================================================================================================================================================================================================================+ -| _resourceType_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _resourceID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _resourceName_ | 1 | WO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _parentID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _expirationTime_ | 1 | RW | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _accessControlPolicyIDs_ | 0..1 (L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _creationTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _lastModifiedTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _labels_ | 0..1(L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _mgmtDefinition_ | 1 | WO | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. This attribute shall have the fixed value 1021 ("dataCollection"). | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _objectIDs_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _objectPaths_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _description_ | 0..1 | RW | See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _containerPath_ | 1 | RW | The URI of the <container> resource in the hosting CSE that stores the data transmitted by the device. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _reportingSchedule_ | 0..1 | RW | The frequency interval, in seconds, used to transmit the data to the Hosting CSE. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _measurement_ _Schedule_ | 0..1 | RW | The frequency interval, in seconds, that the device will use to collect or measure the data. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _mgmtLink_ | 0..1 | RW | A link to a <_mgmtObj_ > resource instance containing the information for establishing End-to-End Security of Primitives (ESPrim) between AE and hosting CSE. ESPrim is specified in oneM2M TS-0003 <a href="#_ref_3">[3]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| NOTE: The present specification does not support configuration for End-to-End Security of Data (ESData) specified in oneM2M TS-0003 <a href="#_ref_3">[3]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------------+------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - +The _[dataCollection]_ resource shall contain the attributes specified in table 7.1.3-2. + +**Table 7.1.3-2: Attributes of _[dataCollection]_ resource**<a name="table_7.1.3-2"></a> + ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| Attributes of \ | Multiplicity | RW/\ | Description | +| _[dataCollection]_ | | RO/\ | | +| | | WO | | ++:==========================+:=============+:=====+:==================================================================================================================================================================================================================================+ +| _resourceType_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _resourceID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _resourceName_ | 1 | WO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _parentID_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _expirationTime_ | 1 | RW | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _accessControlPolicyIDs_ | 0..1 (L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _creationTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _lastModifiedTime_ | 1 | RO | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _labels_ | 0..1(L) | RW | See clause 9.6.1.3 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _mgmtDefinition_ | 1 | WO | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). This attribute shall have the fixed value 1021 ("dataCollection"). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _objectIDs_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _objectPaths_ | 0..1 (L) | WO | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _description_ | 0..1 | RW | See clause 9.6.15 of oneM2M TS-0001 [\[2\]](#_ref_2). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _containerPath_ | 1 | RW | The URI of the <container> resource in the hosting CSE that stores the data transmitted by the device. | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _reportingSchedule_ | 0..1 | RW | The frequency interval, in seconds, used to transmit the data to the Hosting CSE. | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _measurementSchedule_ | 0..1 | RW | The frequency interval, in seconds, that the device will use to collect or measure the data. | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _mgmtLink_ | 0..1 | RW | A link to a _<mgmtObj>_ resource instance containing the information for establishing End-to-End Security of Primitives (ESPrim) between AE and hosting CSE. ESPrim is specified in oneM2M TS-0003 [\[3\]](#_ref_3). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| NOTE: The present specification does not support configuration for End-to-End Security of Data (ESData) specified in oneM2M TS-0003 [\[3\]](#_ref_3). | ++---------------------------+--------------+------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ ### 7.1.4 Resource [authenticationProfile] -The [_authenticationProfile_ ] specialization of the <_mgmtObj_ > is used to convey the configuration information regarding establishing mutually-authenticated secure communications. The security principal using this configuration information can be a CSE or AE or the Managed ADN/ASN/MN acting as security principal on behalf of AEs on the Node. -An [_authenticationProfile_ ] instance identifies a security framework, TLS cipher suites, and credentials to be used. The applicable security framework is identified by the SUID attribute. The interpretation of SUID is specified in table 7.1.43. +The _[authenticationProfile]_ specialization of the _<mgmtObj>_ is used to convey the configuration information regarding establishing mutually-authenticated secure communications. The security principal using this configuration information can be a CSE or AE or the Managed ADN/ASN/MN acting as security principal on behalf of AEs on the Node. -> NOTE 1: The present document does not support using [authenticationProfile] for identifying ESData credentials. +An _[authenticationProfile]_ instance identifies a security framework, TLS cipher suites, and credentials to be used. The applicable security framework is identified by the SUID attribute. The interpretation of SUID is specified in table 7.1.43. -The [_authenticationProfile_ ] resource does not include any credentials, but either identifies credentials which are stored locally on the Managed Entity or identifies an M2M Authentication Function (MAF) which is to be used to facilitate establishing symmetric keys. The intended security principal on the Managed Entity is the security principal which can use either all the credentials identified by the [_authenticationProfile_ ] resource, or (in the case that a MAF is identified) all of the credentials required for mutual authentication with the MAF. +> NOTE 1: The present document does not support using [authenticationProfile] for identifying ESData credentials. -> NOTE 2: The other security principal can be any of the following: CSE; AE; a Node terminating the security protocol on behalf of AE on Node; and an M2M Authentication Function (MAF). +The _[authenticationProfile]_ resource does not include any credentials, but either identifies credentials which are stored locally on the Managed Entity or identifies an M2M Authentication Function (MAF) which is to be used to facilitate establishing symmetric keys. The intended security principal on the Managed Entity is the security principal which can use either all the credentials identified by the _[authenticationProfile]_ resource, or (in the case that a MAF is identified) all of the credentials required for mutual authentication with the MAF. -The [_authenticationProfile_ ] resource shall contain the child resource specified in table 7.1.4-1. +> NOTE 2: The other security principal can be any of the following: CSE; AE; a Node terminating the security protocol on behalf of AE on Node; and an M2M Authentication Function (MAF). +The _[authenticationProfile]_ resource shall contain the child resource specified in table 7.1.4-1. -**Table 7.1.4-1: Child resources of _[_ _authenticationProfile_ _]_ resource**<a name="table_7.1.4-1"></a> -|**Child Resources of** **_[_** **_authenticationProfile_** **_]_** |**Child Resource Type** |**Multiplicity** |**Description** | +**Table 7.1.4-1: Child resources of _[authenticationProfile]_ resource**<a name="table_7.1.4-1"></a> + +|Child Resources of _[authenticationProfile]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | - -The [_authenticationProfile_ ] resource shall contain the attributes specified in table 7.1.4-2. +The _[authenticationProfile]_ resource shall contain the attributes specified in table 7.1.4-2. -**Table 7.1.4-2: Attributes of _[_ _authenticationProfile_ _]_ resource**<a name="table_7.1.4-2"></a> +**Table 7.1.4-2: Attributes of _[authenticationProfile]_ resource**<a name="table_7.1.4-2"></a> -|**Attributes of** <br />**_[_** **_authenticationProfile_** **_]_** |**Multiplicity** |**RW/**<br />**RO/**<br />**WO** |**Description** | +|Attributes of<br />_[authenticationProfile]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -500,100 +455,93 @@ The [_authenticationProfile_ ] resource shall contain the attributes specified i |_mycertFingerprint_ |0..1 |WO |Present when certificate-based authentication is to be used. Provides a hash value for identifying the certificate to be used by the intended security principal on the Managed Entity to authenticate itself to other security principals. | |_rawPubKeyID_ |0..1 |WO |Present when certificate-based authentication is to be used and the other security principal will authenticate itself with a Raw Public Key Certificate. | |M2M-Sub-ID |0..1 |WO |The identifier assigned by the M2M Service Provider for the M2M Service Subscription of the registree. | -|_mgmtLink_ |0..1(L) |RW |Present when MAF is to be used to facilitate establishing one or more symmetric keys for mutual authentication or certificate-based authentication is to be used. In the former case, the list contains one reference to a [_MAFClientRegCfg_ ] resource. In the latter case, the list contains one or more references pointing to _[_ _trustAnchorCred_ _]_ resources. | - - - - -**Table 7.1.4-3: SUID which are currently supported in the [_authenticationProfile_ ] resource, along with reference to the authentication procedure in oneM2M TS-0003 <a href="#_ref_3">[3]</a> and mapping to symmetric key**<a name="table_7.1.4-3"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| **Value** | **Interpretation** \ | Authentication Procedure in oneM2M TS-0003 <a href="#_ref_3">[3]</a> | **Derived Symmetric Key** | **DTLS/TLS Notes** | -| | **(see n** **ote)** | | | | -+:==========================================================================================================================================================================================+:=======================================================================================================================================================================================+:=====================================================================+:============================+:==============================================================================================================================================+ -| 10 | A pre-provisioned symmetric key intended to be shared with a MEF | 8.3.2.1 | Kpm | See TLS-PSK Profile in clause 10.2.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 11 | A pre-provisioned symmetric key intended to be shared with a MAF | 8.8.2.2 | Km | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 12 | A pre-provisioned symmetric key intended for use in a Security Associated Establishment Framework (SAEF) | 8.2.2.1 | Kpsa | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 13 | A pre-provisioned symmetric key intended for use in End-to-End Security of Primitives (ESPrim) | 8.4.2 | pairwiseESPrimKey | DTLS/TLS is not used | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 21 | A symmetric key, provisioned via a Remote Security Provisioning Framework (RSPF), and intended to be shared with a MAF | RSPF: 8.3.1.2\ | Km | See TLS-PSK Profile in clause 10.2.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | -| | | MAF: 8.8.2.2, 8.8.3.1 | | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 22 | A symmetric key, provisioned via a RSPF, and intended for use in a SAEF | RSPF: 8.3.1.2\ | Kpsa | | -| | | SAEF: 8.2.2.1, 9.1.1.1 | | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 23 | A symmetric key, provisioned via a RSPF, and intended for use in ESPrim | RSPF: 8.3.1.2\ | pairwiseESPrimKey | DTLS/TLS is not used | -| | | ESPrim: 8.4.2 | | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 32 | A MAF-distributed symmetric key intended for use in a SAEF | MAF: 8.8.2.7, 8.8.3.3\ | Kpsa | See TLS-PSK Profile in clause 10.2.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | -| | | SAEF: 8.2.2.3, 9.1.1.1 | | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 33 | A MAF-distributed symmetric key intended for use in ESPrim | MAF: 8.8.2.7, 8.8.3.3\ | pairwiseESPrimKey | | -| | | ESPrim: 8.4.2 | | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 40 | A certificate intended to be shared with a MEF | 8.3.2.2 | NP | See certificate-based TLS profile in clause 10.2.3 of oneM2M TS0003 <a href="#_ref_3">[3]</a> | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 41 | A certificate intended to be shared with a MAF | 8.8.2.2 | NP | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 42 | A certificate intended for use in a Security Associated Establishment Framework (SAEF) | 8.2.2.2 | NP | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| 43 | A certificate intended for use in End-to-End Security Certificate-based Key Establishment (ESCertKE) to establish a pairwiseESPrimKey for End-to-End Security of Primitives (ESPrim) | ESCertKE: 8.7\ | NP | For ESCertKE, see certificate-based TLS profile in clause 10.2.3 of oneM2M TS0003 <a href="#_ref_3">[3]</a>. For ESPrim, DTLS/TLS is not used | -| | | ESPrim: 8.4.2 | | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ -| NOTE: The interpretation is copied from definition of m2m:suid in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. The oneM2M TS-0004 <a href="#_ref_4">[4]</a> description takes precedence. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------+-----------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------+ - - -The Managed Entity shall allow only TLS cipher suites identified in _TLSCiphersuites_ in the TLS Handshakes for a [_authenticationProfile_ ] instance. The final column of table 7.1.4-3 provides references to clauses in oneM2M TS0003 <a href="#_ref_3">[3]</a> specifying the TLS Profiles to be used with the SUID values. The _TLSCiphersuite_ attribute shall be present only when the value of _SUID_ identifies a security framework that uses TLS or DTLS. - -If the value of _SUID_ is 10, 11, 12, 21, 22 or 23, then the _symmKeyID_ attribute shall be present. The _symmKeyID_ provides the symmetric key identifier for a symmetric key which shall be retrieved from local storage on the Managed Entity for use in the TLS Handshake. The symmetric key value may be configured in the _symmKeyValue_ . Otherwise, the symmetric key, and associated symmetric key identifier, may be provisioned to the Managed Entity before or after the [_authenticationProfile_ ] is configured. Pre-provisioning or Remote Security Provisioning Frameworks (RSPFs), specified in oneM2M TS-0003 <a href="#_ref_3">[3]</a>, should be used whenever possible to establish symmetric keys. Special care is recommended to ensure the confidentiality and integrity of the credentials when using the _symmKeyValue_ to configure symmetric keys. - -If the value of _SUID_ is 32 or 33, then the _MAFKeyRegDuration_ attribute shall be present, the _MAFKeyRegLabels_ attribute may be present, and a [_MAFClientRegCfg_ ] specialization shall be configured as a child of the [_authenticationProfile_ ] resource. These attributes provide the configuration controlling how the Managed Entity shall interact with a MAF to establish the symmetric key subsequently used for mutual authentication. The fqdn attribute of the [_MAFClientRegCfg_ ] specialization identifies the MAF. - - -- If the Managed Entity has not already performed MAF Client Registration procedure with the identified MAF, then the MAF shall perform MAF Client Registration procedure in clause 8.8.2.3 of oneM2M TS0003 <a href="#_ref_3">[3]</a> using the information in the [_MAFClientRegCfg_ ] specialization of the <_mgmtObj_ > specified in clause 7.1.7 of the present document. +|_mgmtLink_ |0..1(L) |RW |Present when MAF is to be used to facilitate establishing one or more symmetric keys for mutual authentication or certificate-based authentication is to be used. In the former case, the list contains one reference to a _[MAFClientRegCfg]_ resource. In the latter case, the list contains one or more references pointing to _[trustAnchorCred]_ resources. | + + +**Table 7.1.4-3: SUID which are currently supported in the _[authenticationProfile]_ resource, along with reference to the authentication procedure in oneM2M TS-0003 <a href="#_ref_3">[3]</a> and mapping to symmetric key**<a name="table_7.1.4-3"></a> + ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| Value | Interpretation \ | Authentication Procedure in oneM2M TS-0003 [\[3\]](#_ref_3) | Derived Symmetric Key | DTLS/TLS Notes | +| | (see note) | | | | ++:========+:=======================================================================================================================================================================================+:============================================================+:======================+:=====================================================================================================================================+ +| 10 | A pre-provisioned symmetric key intended to be shared with a MEF | 8.3.2.1 | Kpm | See TLS-PSK Profile in clause 10.2.2 of oneM2M TS-0003 [\[3\]](#_ref_3) | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 11 | A pre-provisioned symmetric key intended to be shared with a MAF | 8.8.2.2 | Km | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 12 | A pre-provisioned symmetric key intended for use in a Security Associated Establishment Framework (SAEF) | 8.2.2.1 | Kpsa | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 13 | A pre-provisioned symmetric key intended for use in End-to-End Security of Primitives (ESPrim) | 8.4.2 | pairwiseESPrimKey | DTLS/TLS is not used | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 21 | A symmetric key, provisioned via a Remote Security Provisioning Framework (RSPF), and intended to be shared with a MAF | RSPF: 8.3.1.2\ | Km | See TLS-PSK Profile in clause 10.2.2 of oneM2M TS-0003 [\[3\]](#_ref_3) | +| | | MAF: 8.8.2.2, 8.8.3.1 | | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 22 | A symmetric key, provisioned via a RSPF, and intended for use in a SAEF | RSPF: 8.3.1.2\ | Kpsa | | +| | | SAEF: 8.2.2.1, 9.1.1.1 | | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 23 | A symmetric key, provisioned via a RSPF, and intended for use in ESPrim | RSPF: 8.3.1.2\ | pairwiseESPrimKey | DTLS/TLS is not used | +| | | ESPrim: 8.4.2 | | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 32 | A MAF-distributed symmetric key intended for use in a SAEF | MAF: 8.8.2.7, 8.8.3.3\ | Kpsa | See TLS-PSK Profile in clause 10.2.2 of oneM2M TS-0003 [\[3\]](#_ref_3) | +| | | SAEF: 8.2.2.3, 9.1.1.1 | | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 33 | A MAF-distributed symmetric key intended for use in ESPrim | MAF: 8.8.2.7, 8.8.3.3\ | pairwiseESPrimKey | | +| | | ESPrim: 8.4.2 | | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 40 | A certificate intended to be shared with a MEF | 8.3.2.2 | NP | See certificate-based TLS profile in clause 10.2.3 of oneM2M TS0003 [\[3\]](#_ref_3) | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 41 | A certificate intended to be shared with a MAF | 8.8.2.2 | NP | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 42 | A certificate intended for use in a Security Associated Establishment Framework (SAEF) | 8.2.2.2 | NP | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| 43 | A certificate intended for use in End-to-End Security Certificate-based Key Establishment (ESCertKE) to establish a pairwiseESPrimKey for End-to-End Security of Primitives (ESPrim) | ESCertKE: 8.7\ | NP | For ESCertKE, see certificate-based TLS profile in clause 10.2.3 of oneM2M TS0003 [\[3\]](#_ref_3). For ESPrim, DTLS/TLS is not used | +| | | ESPrim: 8.4.2 | | | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ +| NOTE: The interpretation is copied from definition of m2m:suid in oneM2M TS-0004 [\[4\]](#_ref_4). The oneM2M TS-0004 [\[4\]](#_ref_4) description takes precedence. | ++---------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------------------------------------------------------------+ + + +The Managed Entity shall allow only TLS cipher suites identified in _TLSCiphersuites_ in the TLS Handshakes for a _[authenticationProfile]_ instance. The final column of table 7.1.4-3 provides references to clauses in oneM2M TS0003 <a href="#_ref_3">[3]</a> specifying the TLS Profiles to be used with the SUID values. The _TLSCiphersuite_ attribute shall be present only when the value of _SUID_ identifies a security framework that uses TLS or DTLS. + +If the value of _SUID_ is 10, 11, 12, 21, 22 or 23, then the _symmKeyID_ attribute shall be present. The _symmKeyID_ provides the symmetric key identifier for a symmetric key which shall be retrieved from local storage on the Managed Entity for use in the TLS Handshake. The symmetric key value may be configured in the _symmKeyValue_ . Otherwise, the symmetric key, and associated symmetric key identifier, may be provisioned to the Managed Entity before or after the _[authenticationProfile]_ is configured. Pre-provisioning or Remote Security Provisioning Frameworks (RSPFs), specified in oneM2M TS-0003 <a href="#_ref_3">[3]</a>, should be used whenever possible to establish symmetric keys. Special care is recommended to ensure the confidentiality and integrity of the credentials when using the _symmKeyValue_ to configure symmetric keys. + +If the value of _SUID_ is 32 or 33, then the _MAFKeyRegDuration_ attribute shall be present, the _MAFKeyRegLabels_ attribute may be present, and a _[MAFClientRegCfg]_ specialization shall be configured as a child of the _[authenticationProfile]_ resource. These attributes provide the configuration controlling how the Managed Entity shall interact with a MAF to establish the symmetric key subsequently used for mutual authentication. The fqdn attribute of the _[MAFClientRegCfg]_ specialization identifies the MAF. + + +- If the Managed Entity has not already performed MAF Client Registration procedure with the identified MAF, then the MAF shall perform MAF Client Registration procedure in clause 8.8.2.3 of oneM2M TS0003 <a href="#_ref_3">[3]</a> using the information in the _[MAFClientRegCfg]_ specialization of the _<mgmtObj>_ specified in clause 7.1.7 of the present document. - The Managed Entity shall perform the MAF Key Registration Procedure in clause 8.8.2.7 of oneM2M TS0003 <a href="#_ref_3">[3]</a> with the identified MAF, with the parameters of table 8.8.2.7-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> set as follows: + - The _MAF-FQDN_ parameter shall be set to the value of the _fqdn_ attribute in the _[MAFClientRegCfg]_ specialization which is the child of the _[authenticationProfile]_ resource. + - The _expirationTime_ Parameter shall be set to the time obtained by adding the _MAFKeyRegDuration_ attribute to the present time. + - If _MAFKeyRegLabels_ attribute is present in the _[authenticationProfile]_ resource, then the _labels_ parameter shall be set to the value of the _MAFKeyRegLabels_ attribute. Otherwise, the _labels_ parameter shall not be present. + - The _SUID_ parameter shall be set to the _SUID_ attribute. + - The _targetIDs_ parameter shall be set to the CSE-ID in the _[registration]_ or _[dataCollection]_ resource. - - The _MAF-FQDN_ parameter shall be set to the value of the _fqdn_ attribute in the [_MAFClientRegCfg_ ] specialization which is the child of the [_authenticationProfile_ ] resource. - - The _expirationTime_ Parameter shall be set to the time obtained by adding the _MAFKeyRegDuration_ attribute to the present time. - - If _MAFKeyRegLabels_ attribute is present in the [_authenticationProfile_ ] resource, then the _labels_ parameter shall be set to the value of the _MAFKeyRegLabels_ attribute. Otherwise, the _labels_ parameter shall not be present. - - The _SUID_ parameter shall be set to the _SUID_ attribute. - - The _targetIDs_ parameter shall be set to the CSE-ID in the [_registration_ ] or [_dataCollection_ ] resource. +If the value of SUID is 40, 41, 42, or 43, then the _mycertFingerprint_ attribute shall be present, and either the _rawPubKeyID_ attribute shall be present or one or more _[trustAnchorCred]_ specializations shall be configured as children of the _[authenticationProfile]_ resource. The Managed Entity shall use the certificate matching _mycertFingerprint_ to authenticate itself. The hash value portion of _mycertFingerprint_ shall be computed over the X.509 ASN.1 DER encoded certificate: -If the value of SUID is 40, 41, 42, or 43, then the _my_ _c_ _ertFingerprint_ attribute shall be present, and either the _rawPubKeyID_ attribute shall be present or one or more [_trustAnchorCred_ ] specializations shall be configured as children of the [_authenticationProfile_ ] resource. The Managed Entity shall use the certificate matching _my_ _c_ _ertFingerprint_ to authenticate itself. The hash value portion of _my_ _c_ _ertFingerprint_ shall be computed over the X.509 ASN.1 DER encoded certificate: +- If the _rawPubKeyID_ attribute is present, then the Managed Entity shall compare this value against the public key identifier (similar to a certificate fingerprint) generated from the raw public key certificate presented by the other entity, as specified in clause 10.1.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>. If the _rawPubKeyID_ attribute is present, the Managed Entity shall ignore _[trustAnchorCred]_ resource(s) configured as children of the _[authenticationProfile]_ . +- If the _rawPubKeyID_ attribute is not present, then the Managed Entity shall use the one or more _[trustAnchorCred]_ resource instance(s) configured as children of the _[authenticationProfile]_ resource instance to retrieve Certificate Authority certificates to be used by the Managed Entity as a trust anchor certificate (also known as a "root CA certificate" or "trust root certificate") when validating the certificate chains provided by other entities. The Managed Entity shall allow the TLS handshake only if the other entity provides a certificate chaining to one of these trust anchors, using the process specified in clause 8.1.2.2 in oneM2M TS-0003 <a href="#_ref_3">[3]</a>. - -- If the _rawPubKeyID_ attribute is present, then the Managed Entity shall compare this value against the public key identifier (similar to a certificate fingerprint) generated from the raw public key certificate presented by the other entity, as specified in clause 10.1.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>. If the _rawPubKeyID_ attribute is present, the Managed Entity shall ignore [_trustAnchorCred_ ] resource(s) configured as children of the [_authenticationProfile_ ]. -- If the _rawPubKeyID_ attribute is not present, then the Managed Entity shall use the one or more [_trustAnchorCred_ ] resource instance(s) configured as children of the [_authenticationProfile_ ] resource instance to retrieve Certificate Authority certificates to be used by the Managed Entity as a trust anchor certificate (also known as a "root CA certificate" or "trust root certificate") when validating the certificate chains provided by other entities. The Managed Entity shall allow the TLS handshake only if the other entity provides a certificate chaining to one of these trust anchors, using the process specified in clause 8.1.2.2 in oneM2M TS-0003 <a href="#_ref_3">[3]</a>. - -[_authenticationProfile_ ] resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. +_[authenticationProfile]_ resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. ### 7.1.5 Resource [myCertFileCred] -This <_mgmtObj_ > specialization is used to configure a certificate or certificate chain which the Managed Entity knows the private key. +This _<mgmtObj>_ specialization is used to configure a certificate or certificate chain which the Managed Entity knows the private key. -The [_myCertFileCred_ ] resource shall contain the child resource specified in table 7.1.5-1. +The _[myCertFileCred]_ resource shall contain the child resource specified in table 7.1.5-1. -**Table 7.1.5-1: Child resources of _[_ _myCertFileCred_ _]_ resource**<a name="table_7.1.5-1"></a> +**Table 7.1.5-1: Child resources of _[myCertFileCred]_ resource**<a name="table_7.1.5-1"></a> -|**Child Resources of** **_[_** **_myCertFileCred_** **_]_** |**Child Resource Type** |**Multiplicity** |**Description** | +|Child Resources of _[myCertFileCred]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[myCertFileCred]_ resource shall contain the attributes specified in table 7.1.5-2. -The [_myCertFileCred_ ] resource shall contain the attributes specified in table 7.1.5-2. +**Table 7.1.5-2: Attributes of _[myCertFileCred]_ resource**<a name="table_7.1.5-2"></a> -**Table 7.1.5-2: Attributes of _[_ _myCertFileCred_ _]_ resource**<a name="table_7.1.5-2"></a> - -|**Attributes of** <br />**_[_** **_myCertFileCred_** **_]_** |**Multiplicity** |**RW/**<br />**RO/**<br />**WO** |**Description** | +|Attributes of<br />_[myCertFileCred]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -613,60 +561,55 @@ The [_myCertFileCred_ ] resource shall contain the attributes specified in table |_myCertFileContent_ |1 |WO |Certificate or certificate chain. Default media-type is "application/pkcs7-mime". | - -The _SUIDs_ attribute lists the Security Usage Identifiers (SUIDs) of the security frameworks which shall be allowed using this credential for establishing mutually-authenticated secure communication. Any SUID which is not in this list shall be prevented from using this credential for establishing mutually-authenticated secure communication. The SUID values allowed in this attribute are listed in table 7.1.5-3. See table 7.1.4-3 for references to the corresponding authentication procedure in oneM2M TS-0003 <a href="#_ref_3">[3]</a> and DTLS/TLS notes. +The _SUIDs_ attribute lists the Security Usage Identifiers (SUIDs) of the security frameworks which shall be allowed using this credential for establishing mutually-authenticated secure communication. Any SUID which is not in this list shall be prevented from using this credential for establishing mutually-authenticated secure communication. The SUID values allowed in this attribute are listed in table 7.1.5-3. See table 7.1.4-3 for references to the corresponding authentication procedure in oneM2M TS-0003 <a href="#_ref_3">[3]</a> and DTLS/TLS notes. -**Table 7.1.5-3: SUID which are currently supported in the [_myCertFileCred_ ] resource**<a name="table_7.1.5-3"></a> +**Table 7.1.5-3: SUID which are currently supported in the _[myCertFileCred]_ resource**<a name="table_7.1.5-3"></a> -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| **Value** | **Interpretation (see n** **ote)** | -+:==============================================================================================================================================================================================+:=======================================================================================================================================================================================+ -| 40 | A certificate intended to be shared with a MEF | -+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| 41 | A certificate intended to be shared with a MAF | -+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| 42 | A certificate intended for use in a Security Associated Establishment Framework (SAEF) | -+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| 43 | A certificate intended for use in End-to-End Security Certificate-based Key Establishment (ESCertKE) to establish a pairwiseESPrimKey for End-to-End Security of Primitives (ESPrim) | -+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| NOTE: The interpretation is copied from the definition of m2m:suid in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. The oneM2M TS-0004 <a href="#_ref_4">[4]</a> description takes precedence. | -+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ ++----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| Value | Interpretation (see note) | ++:===============+:=======================================================================================================================================================================================+ +| 40 | A certificate intended to be shared with a MEF | ++----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| 41 | A certificate intended to be shared with a MAF | ++----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| 42 | A certificate intended for use in a Security Associated Establishment Framework (SAEF) | ++----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| 43 | A certificate intended for use in End-to-End Security Certificate-based Key Establishment (ESCertKE) to establish a pairwiseESPrimKey for End-to-End Security of Primitives (ESPrim) | ++----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| NOTE: The interpretation is copied from the definition of m2m:suid in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. The oneM2M TS-0004 <a href="#_ref_4">[4]</a> description takes precedence. | ++---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ The Certificate issuer should verify that the corresponding private key is known to the Managed Entity. The present specification does not provide a mechanism for such verification. -> NOTE: In many scenarios, if the device management session takes place over a TLS connection in which the Managed Entity is authenticated using an existing certificate (e.g. a manufacturer certificate), then it would be acceptable to issue a certificate with SubjectPublicKeyInfo copied from the existing certificate. +> NOTE: In many scenarios, if the device management session takes place over a TLS connection in which the Managed Entity is authenticated using an existing certificate (e.g. a manufacturer certificate), then it would be acceptable to issue a certificate with SubjectPublicKeyInfo copied from the existing certificate. Managed Entities shall support the default certificate-related media type. -If the _my_ _c_ _ertFingerprint_ attribute in an [_authenticationProfile_ ] resource matches the certificate in a [_myCertFileCred_ ] resource, then the authentication protocol based on that [_authenticationProfile_ ] shall provide the certificate or certificate chain in the _myCertFileContent_ , and shall use the corresponding private key to authenticate the Managed Entity. +If the _mycertFingerprint_ attribute in an _[authenticationProfile]_ resource matches the certificate in a _[myCertFileCred]_ resource, then the authentication protocol based on that _[authenticationProfile]_ shall provide the certificate or certificate chain in the _myCertFileContent_ , and shall use the corresponding private key to authenticate the Managed Entity. -[_myCertFileCred_ ] instances are expected to be protected by a secure environment on the Managed Entity, in order to preserve confidentiality and integrity of the attributes. Optimal protection is provided when the decryption and integrity verification of the management protocol message occurs in the secure environment. +_[myCertFileCred]_ instances are expected to be protected by a secure environment on the Managed Entity, in order to preserve confidentiality and integrity of the attributes. Optimal protection is provided when the decryption and integrity verification of the management protocol message occurs in the secure environment. ### 7.1.6 Resource [trustAnchorCred] -The [_trustAnchorCred_ ] <_mgmtObj_ > specialization is read by AEs or CSEs on ADN or ASN/MN nodes in the Field Domain. A [_trustAnchorCred_ ] is configured as a child or children of [_authenticationProfile_ ] resources by means of a mgmtLink. A security principal acting on a [_authenticationProfile_ ] uses the information in the associated [_trustAnchorCred_ ] resources to identify a trust anchor certificate for validation of certificates. +The _[trustAnchorCred] <mgmtObj>_ specialization is read by AEs or CSEs on ADN or ASN/MN nodes in the Field Domain. A _[trustAnchorCred]_ is configured as a child or children of _[authenticationProfile]_ resources by means of a mgmtLink. A security principal acting on a _[authenticationProfile]_ uses the information in the associated _[trustAnchorCred]_ resources to identify a trust anchor certificate for validation of certificates. -The [_trustAnchorCred_ ] resource shall contain the child resource specified in table 7.1.6-1. +The _[trustAnchorCred]_ resource shall contain the child resource specified in table 7.1.6-1. -**Table 7.1.6-1: Child resources of _[_ _trustAnchorCred_ _]_ resource**<a name="table_7.1.6-1"></a> +**Table 7.1.6-1: Child resources of _[trustAnchorCred]_ resource**<a name="table_7.1.6-1"></a> -|**Child Resources of** **_[_** **_trustAnchorCred_** **_]_** |**Child Resource Type** |**Multiplicity** |**Description** | +|Child Resources of _[trustAnchorCred]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[trustAnchorCred]_ resource shall contain the attributes specified in table 7.1.6-2. -The [_trustAnchorCred_ ] resource shall contain the attributes specified in table 7.1.6-2. - +**Table 7.1.6-2: Attributes of _[trustAnchorCred]_ resource**<a name="table_7.1.6-2"></a> -**Table 7.1.6-2: Attributes of _[_ _trustAnchorCred_ _]_ resource**<a name="table_7.1.6-2"></a> - -|**Attributes of** <br />**_[_** **_trustAnchorCred_** **_]_** |**Multiplicity** |**RW/**<br />**RO/**<br />**WO** |**Description** | +|Attributes of <br />_[trustAnchorCred]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -676,41 +619,39 @@ The [_trustAnchorCred_ ] resource shall contain the attributes specified in tabl |_accessControlPolicyIDs_ |0..1 (L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_creationTime_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_lastModifiedTime_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -|_L_ _abels_ |0..1(L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_Labels_ |0..1(L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_mgmtDefinition_ |1 |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. This attribute shall have the fixed value 1024 ("trustAnchorCred"). | |_objectIDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_objectPaths_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -|_D_ _escription_ |0..1 |RW |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_Description_ |0..1 |RW |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_certFingerprint_ |1 |WO |Provides a hash value for identifying a certificate authority certificate to be used for validating certificates presented by other entities. | |_URI_ |1 |RW |A URI from which the trust anchor certificate may be retrieved. | +The _certFingerprint_ attribute of the _[trustAnchorCred]_ resource identifies a Certificate Authority certificate to be used by the Managed Entity as a trust anchor when validating the certificate chains provided by other entities. The hash value portion of the _certFingerprint_ attribute shall be computed over the X.509 ASN.1 DER encoded certificate using the SHA-256 hash algorithm defined in FIPS PUB 180-4 <a href="#_ref_10">[10]</a>. The certFingerprint attribute shall be represented in the named information (ni) URI format defined in IETF RFC 6920 <a href="#_ref_7">[7]</a>, see tables 7.2.6.1-2 and 7.3.2-1. Where the CA Certificate identified in a _[trustAnchorCred]_ resource is not already in local storage, then the Managed Entity shall retrieve the certificate using the _URI_ attribute in the _[trustAnchorCred]_ resources. -The _certFingerprint_ attribute of the [_trustAnchorCred_ ] resource identifies a Certificate Authority certificate to be used by the Managed Entity as a trust anchor when validating the certificate chains provided by other entities. The hash value portion of the _certFingerprint_ attribute shall be computed over the X.509 ASN.1 DER encoded certificate using the SHA-256 hash algorithm defined in FIPS PUB 180-4 <a href="#_ref_10">[10]</a>. The certFingerprint attribute shall be represented in the named information (ni) URI format defined in IETF RFC 6920 <a href="#_ref_7">[7]</a>, see tables 7.2.6.1-2 and 7.3.2-1. Where the CA Certificate identified in a [_trustAnchorCred_ ] resource is not already in local storage, then the Managed Entity shall retrieve the certificate using the _URI_ attribute in the [_trustAnchorCred_ ] resources. - -[_trustAnchorCred_ ] resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. +_[trustAnchorCred]_ resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. ### 7.1.7 Resource [MAFClientRegCfg] -This <_mgmtObj_ > specialization is used to convey instructions regarding the MAF Client Registration procedure (clause 8.8.2.3 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>). +This _<mgmtObj>_ specialization is used to convey instructions regarding the MAF Client Registration procedure (clause 8.8.2.3 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>). -The [_MAFClientRegCfg_ ] resource shall contain the child resource specified in table 7.1.7-1. +The _[MAFClientRegCfg]_ resource shall contain the child resource specified in table 7.1.7-1. -**Table 7.1.7-1: Child resources of _[_ _MAFClientRegCfg_ _]_ resource**<a name="table_7.1.7-1"></a> +**Table 7.1.7-1: Child resources of _[MAFClientRegCfg]_ resource**<a name="table_7.1.7-1"></a> -|**Child Resources of** **_[_** **_MAFClientRegCfg_** **_]_** |**Child Resource Type** |**Multiplicity** |**Description** | +|Child Resources of _[MAFClientRegCfg]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[MAFClientRegCfg]_ resource shall contain the attributes specified in table 7.1.7-2. -The [_MAFClientRegCfg_ ] resource shall contain the attributes specified in table 7.1.7-2. +**Table 7.1.7-2: Attributes of _[MAFClientRegCfg]_ resource**<a name="table_7.1.7-2"></a> -**Table 7.1.7-2: Attributes of _[_ _MAFClientRegCfg_ _]_ resource**<a name="table_7.1.7-2"></a> - -|**Attributes of** <br />**_[_** **_MAFClientRegCfg_** **_]_** |**Multiplicity** |**RW/**<br />**RO/**<br />**WO** |**Description** | +|Attributes of<br />_[MAFClientRegCfg]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -733,32 +674,30 @@ The [_MAFClientRegCfg_ ] resource shall contain the attributes specified in tabl |_mgmtLink_ |1 |RW |A link to a [authenticationProfile] resource containing the parameters for the MAF Client to establish mutuallyauthenticated secure communications with the MAF. | - The MAF Client shall perform the MAF Client Registration Procedure specified in clause 8.8.2.3 of oneM2M TS0003 <a href="#_ref_3">[3]</a>, using the linked authentication profile for mutual authentication of the MAF Client and MAF. -The MOs configured to the Managed Entity via [_MAFClientRegCfg_ ] resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. +The MOs configured to the Managed Entity via _[MAFClientRegCfg]_ resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. ### 7.1.8 Resource [MEFClientRegCfg] -This <_mgmtObj_ > specialization is used to convey instructions regarding the MEF Client Registration procedure (clause 8.3.5.2.3 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>). +This _<mgmtObj>_ specialization is used to convey instructions regarding the MEF Client Registration procedure (clause 8.3.5.2.3 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>). -The [_MEFClientRegCfg_ ] resource shall contain the child resource specified in table 7.1.8-1. +The _[MEFClientRegCfg]_ resource shall contain the child resource specified in table 7.1.8-1. -**Table 7.1.8-1: Child resources of _[_ _MEFClientRegCfg_ _]_ resource**<a name="table_7.1.8-1"></a> +**Table 7.1.8-1: Child resources of _[MEFClientRegCfg]_ resource**<a name="table_7.1.8-1"></a> -|**Child Resources of** **_[_** **_MEFClientRegCfg_** **_]_** |**Child Resource Type** |**Multiplicity** |**Description** | +|Child Resources of _[MEFClientRegCfg]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[MEFClientRegCfg]_ resource shall contain the attributes specified in table 7.1.8-2. -The [_MEFClientRegCfg_ ] resource shall contain the attributes specified in table 7.1.8-2. +**Table 7.1.8-2: Attributes of _[MEFClientRegCfg]_ resource**<a name="table_7.1.8-2"></a> -**Table 7.1.8-2: Attributes of _[_ _MEFClientRegCfg_ _]_ resource**<a name="table_7.1.8-2"></a> - -|**Attributes of** <br />**_[_** **_MEFClientRegCfg_** **_]_** |**Multiplicity** |**RW/**<br />**RO/**<br />**WO** |**Description** | +|Attributes of <br />_[MEFClientRegCfg]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -778,35 +717,31 @@ The [_MEFClientRegCfg_ ] resource shall contain the attributes specified in tabl |_httpPort_ |0..1 |WO |See clause 8.3.7 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | |_coapPort_ |0..1 |WO |See clause 8.3.7 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | |_websocketPort_ |0..1 |WO |See clause 8.3.7 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | -|_mgmtLink_ |1 |RW |A link to a [_authenticationProfile_ ] resource containing the parameters for the MEF Client to establish mutually-authenticated secure communications with the MEF. | - +|_mgmtLink_ |1 |RW |A link to a _[authenticationProfile]_ resource containing the parameters for the MEF Client to establish mutually-authenticated secure communications with the MEF. | The MEF Client shall perform the MEF Client Registration Procedure specified in clause 8.8.2.3 of oneM2M TS0003 <a href="#_ref_3">[3]</a>, using the linked authentication profile for mutual authentication of the MEF Client and MEF. -The MOs configured to the Managed Entity via [_MEFClientRegCfg_ ] resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. +The MOs configured to the Managed Entity via _[MEFClientRegCfg]_ resources are expected to be protected by a secure environment on the Managed Entity, in order to preserve integrity of the attributes. Optimal protection is provided when the integrity protection of the management protocol message is verified in the secure environment. ### 7.1.9 Resource [OAuth2Authentication] This specialization of <mgmtObj> is used to store access token and refresh token used in OAuth2 security protocol -The _[_ _OAuth2Authentication_ _]_ resource shall contain the child resources specified in table 7.1.9-1. +The _[OAuth2Authentication]_ resource shall contain the child resources specified in table 7.1.9-1. -**Table 7.1.9-1: Child resources of _[_ _OAuth2Authentication_ _]_ resource**<a name="table_7.1.9-1"></a> +**Table 7.1.9-1: Child resources of _[OAuth2Authentication]_ resource**<a name="table_7.1.9-1"></a> -|Child Resources of _[_ _OAuth2Authentication_ _]_ |Child Resource Type |Multiplicity |Description | +|Child Resources of _[OAuth2Authentication]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[OAuth2Authentication]_ resource shall contain the attributes specified in table 7.1.9-2. +**Table 7.1.9-2: Attributes of _[OAuth2Authentication]_ resource**<a name="table_7.1.9-2"></a> -The _[_ _OAuth2Authentication_ _]_ resource shall contain the attributes specified in table 7.1.9-2. - - -**Table 7.1.9-2: Attributes of _[_ _OAuth2Authentication_ _]_ resource**<a name="table_7.1.9-2"></a> - -|**Attributes of** <br />**[** **_OAuth2Authentication_** **]** |**Multiplicity** |**RW/** <br />**RO/** <br />**WO** |**Description** | +|Attributes of<br />_[OAuth2Authentication]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |resourceType |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |resourceID |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -825,32 +760,26 @@ The _[_ _OAuth2Authentication_ _]_ resource shall contain the attributes specif |refreshToken |1 |RW |Indicates OAuth2 refresh token. | - - -### 7.1.10 Resource [_wifiClient_ _]_ +### 7.1.10 Resource [wifiClient] This specialization of <mgmtObj> is used to store configuration of Wi-Fi® connection on the client device. -The _[_ _wifiClient_ _]_ resource shall contain the child resources specified in table 7.1.10-1. - +The _[wifiClient]_ resource shall contain the child resources specified in table 7.1.10-1. -**Table 7.1.10-1: Child resources of _[_ _wifiClient_ _]_ resource**<a name="table_7.1.10-1"></a> +**Table 7.1.10-1: Child resources of _[wifiClient]_ resource**<a name="table_7.1.10-1"></a> -|Child Resources of _[_ _wifiClient_ _]_ |Child Resource Type |Multiplicity |Description | +|Child Resources of _[wifiClient]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[wifiClient]_ resource shall contain the attributes specified in table 7.1.10-2. +**Table 7.1.10-2: Attributes of _[wifiClient]_ resource**<a name="table_7.1.10-2"></a> -The _[_ _wifiClient_ _]_ resource shall contain the attributes specified in table 7.1.10-2. - - -**Table 7.1.10-2: Attributes of _[_ _wifiClient_ _]_ resource**<a name="table_7.1.10-2"></a> - -|**Attributes of** <br />**_[_** **_wifiClient_** **_]_** |**Multiplicity** |**RW/** <br />**RO/** <br />**WO** |**Description** | +|Attributes of <br />_[wifiClient]_ |Multiplicity** |RW/ <br />RO/ <br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -|_resource_ _Name_ |1 |WO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_resourceName_ |1 |WO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_parentID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_expirationTime_ |1 |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_accessControlPolicyIDs_ |0..1 (L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -858,44 +787,39 @@ The _[_ _wifiClient_ _]_ resource shall contain the attributes specified in tab |_lastModifiedTime_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_labels_ |0..1(L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_mgmtDefinition_ |1 |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. This attribute shall have the fixed value 1027(wifiClient). | -|_object_ _ID_ _s_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_objectIDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_objectPaths_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_description_ |0..1 |RW |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -|_ssid_ |1 |RW |Indicates ssid of Wi-Fi® network. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. | +|_ssid_ |1 |RW |Indicates ssid of Wi-Fi® network. This attribute is a specialization of _[objectAttribute]_ attribute. | |_credentials_ |0..1 |RW |Indicates encryption type and credentials used to authenticate connection. This attribute is a specialization of [objectAttribute] attribute. | |_macAddress_ |0..1 |RW |Indicates MAC address of network's access point. This attribute is a specialization of [objectAttribute] attribute. | |_channel_ |0..1 |RO |Indicates Wi-Fi® channel. This attribute is a specialization of [objectAttribute] attribute. | -|_connectionStatus_ |0..1 |RW |Indicates current status of the connection. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. | -|_scan_ |1 |RW |The action that allows to scan the environment to find available Wi-Fi® networks. The action is triggered by assigning value "TRUE" to this attribute. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. This action will provide all the available ssids in _scanResult_ . | -|_scanResult_ |1 |RW |Indicates list of networks detected by the device. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. | +|_connectionStatus_ |0..1 |RW |Indicates current status of the connection. This attribute is a specialization of _[objectAttribute]_ attribute. | +|_scan_ |1 |RW |The action that allows to scan the environment to find available Wi-Fi® networks. The action is triggered by assigning value "TRUE" to this attribute. This attribute is a specialization of _[objectAttribute]_ attribute. This action will provide all the available ssids in _scanResult_ . | +|_scanResult_ |1 |RW |Indicates list of networks detected by the device. This attribute is a specialization of _[objectAttribute]_ attribute. | |_update_ |1 |RW |The action is to trigger the device to update its Wi-Fi® configuration based on the provided values (e.g. ssid, credentials, etc.).The action is triggered by assigning value "TRUE" to this attribute. This attribute is a specialization of [objectAttribute] attribute. | -|_updateStatus_ |1 |RW |Indicates status of update operation. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. | -|_toggleRadioStatus_ |0..1 |RW |The action that allows to turn on and turn off the Wi-Fi® subsystem on Wi-Fi® client device according to present radioStatus attribute value. The action is triggered by assigning value "TRUE" to this attribute. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. This action will switch _radioStatus_ . | -|_radioStatus_ |0..1 |RW |Indicates whether the Wi-Fi® sub-system on Wi-Fi® client device is turned on or turned off. This attribute is a specialization of _[_ _objectAttribute_ _]_ attribute. | +|_updateStatus_ |1 |RW |Indicates status of update operation. This attribute is a specialization of _[objectAttribute]_ attribute. | +|_toggleRadioStatus_ |0..1 |RW |The action that allows to turn on and turn off the Wi-Fi® subsystem on Wi-Fi® client device according to present radioStatus attribute value. The action is triggered by assigning value "TRUE" to this attribute. This attribute is a specialization of _[objectAttribute]_ attribute. This action will switch _radioStatus_ . | +|_radioStatus_ |0..1 |RW |Indicates whether the Wi-Fi® sub-system on Wi-Fi® client device is turned on or turned off. This attribute is a specialization of _[objectAttribute]_ attribute. | - - -### 7.1.11 Resource [_credentials_ _]_ +### 7.1.11 Resource [credentials] This specialization of <mgmtObj> is used to store credentials on the client device. -The _[credentials]_ resource shall contain the child resources specified in table 7.1.11-1. +The _[credentials]_ resource shall contain the child resources specified in table 7.1.11-1. +**Table 7.1.11-1: Child resources of _[credentials]_ resource**<a name="table_7.1.11-1"></a> -**Table 7.1.11-1: Child resources of _[credentials]_ resource**<a name="table_7.1.11-1"></a> - -|Child Resources of _[_ _credentials_ _]_ |Child Resource Type |Multiplicity |Description | +|Child Resources of _[credentials]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[credentials]_ resource shall contain the attributes specified in table 7.1.11.-2 -The _[credentials]_ resource shall contain the attributes specified in table 7.1.11.-2 - +**Table 7.1.11-2: Attributes of _[credentials]_ resource**<a name="table_7.1.11-2"></a> -**Table 7.1.11-2: Attributes of _[credentials]_ resource**<a name="table_7.1.11-2"></a> - -|Attributes of <br />_[_ _wifiClient_ _]_ |Multiplicity |RW/<br />RO/<br />WO |Description | +|Attributes of <br />_[wifiClient]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -907,7 +831,7 @@ The _[credentials]_ resource shall contain the attributes specified in table 7. |_lastModifiedTime_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_labels_ |0..1(L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_mgmtDefinition_ |1 |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>.. This attribute shall have the fixed value 1029(credentials). | -|_object_ _IDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_objectIDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_objectPaths_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_description_ |0..1 |RW |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_purpose_ |0..1 |RW |Indicates the intended use of this credentials set. | @@ -916,28 +840,25 @@ The _[credentials]_ resource shall contain the attributes specified in table 7. |_credentialToken_ |0..1 |RW |Indicates a token for authentication. | - - -### 7.1.12 Resource [_SIM_ _]_ +### 7.1.12 Resource [SIM] This specialization of <mgmtObj> is used to store configuration of Subscriber Identification Module (SIM) and status information. This information is meant to configure devices, e.g. to activate or deactivate SIM on a device, as well as provide information about used and deployed SIM identify to other entities. The terms "SIM" and "Subscriber Identity Module" are used in this resource to refer to the physical/logical platform hosting the application handling authentication of the related subscriber onto a 3GPP network. -The _[SIM]_ resource shall contain the child resources specified in table 7.1.12-1. +The _[SIM]_ resource shall contain the child resources specified in table 7.1.12-1. -**Table 7.1.12-1: Child resources of _[SIM]_ resource**<a name="table_7.1.12-1"></a> +**Table 7.1.12-1: Child resources of _[SIM]_ resource**<a name="table_7.1.12-1"></a> |Child Resources of _[SIM]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | +The _[SIM]_ resource shall contain the attributes specified in table 7.1.12-2. -The _[SIM]_ resource shall contain the attributes specified in table 7.1.12-2. - -**Table 7.1.12-2: Attributes of _[SIM]_ resource**<a name="table_7.1.12-2"></a> +**Table 7.1.12-2: Attributes of _[SIM]_ resource**<a name="table_7.1.12-2"></a> |Attributes of <br />_[SIM]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| @@ -951,7 +872,7 @@ The _[SIM]_ resource shall contain the attributes specified in table 7.1.12-2. |_lastModifiedTime_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_labels_ |0..1(L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_mgmtDefinition_ |1 |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>.. This attribute shall have the fixed value 1030 (SIM). | -|_object_ _IDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_objectIDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_objectPaths_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_description_ |0..1 |RW |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_imsi_ |0..1 |RW |The _international mobile subscriber identity_ (IMSI) that is associated with the SIM. | @@ -961,28 +882,24 @@ The _[SIM]_ resource shall contain the attributes specified in table 7.1.12-2. |_serviceProviderName_ |0..1 |RW |The Service Provider Name (SPN) of a SIM. | - - -### 7.1.13 Resource [_mobileNetwork_ _]_ +### 7.1.13 Resource [mobileNetwork] This specialization of <mgmtObj> is used to store information about the currently connected mobile network. This information can be derived from the network, but also be provided by an OSS (Operation Support System), or be provided by a device. -The _[_ _mobileNetwork_ _]_ resource shall contain the child resources specified in table 7.1.13-1. +The _[mobileNetwork]_ resource shall contain the child resources specified in table 7.1.13-1. +**Table 7.1.13-1: Child resources of _[mobileNetwork]_ resource**<a name="table_7.1.13-1"></a> -**Table 7.1.13-1: Child resources of _[_ _mobileNetwork_ _]_ resource**<a name="table_7.1.13-1"></a> - -|Child Resources of _[_ _mobileNetwork_ _]_ |Child Resource Type |Multiplicity |Description | +|Child Resources of _[mobileNetwork]_ |Child Resource Type |Multiplicity |Description | |-|-|-|-| |_[variable]_ |_<subscription>_ |0..n |See clause 9.6.8 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> | - -The _[_ _mobileNetwork_ _]_ resource shall contain the attributes specified in table 7.1.13-2. The specialisation attributes are derived from and map to the LwM2M Object #4 "Connectivity Monitoring" definition <a href="#_ref_11">[11]</a>. +The _[mobileNetwork]_ resource shall contain the attributes specified in table 7.1.13-2. The specialisation attributes are derived from and map to the LwM2M Object #4 "Connectivity Monitoring" definition <a href="#_ref_11">[11]</a>. -**Table 7.1.13-2: Attributes of _[_ _mobileNetwork_ _]_ resource**<a name="table_7.1.13-2"></a> +**Table 7.1.13-2: Attributes of _[mobileNetwork]_ resource**<a name="table_7.1.13-2"></a> -|Attributes of <br />_[_ _mobileNetwork_ _]_ |Multiplicity |RW/<br />RO/<br />WO |Description | +|Attributes of <br />_[mobileNetwork]_ |Multiplicity |RW/<br />RO/<br />WO |Description | |-|-|-|-| |_resourceType_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_resourceID_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | @@ -994,7 +911,7 @@ The _[_ _mobileNetwork_ _]_ resource shall contain the attributes specified in |_lastModifiedTime_ |1 |RO |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_labels_ |0..1(L) |RW |See clause 9.6.1.3 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_mgmtDefinition_ |1 |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>.. This attribute shall have the fixed value 1031 (mobileNetwork).<br /> | -|_object_ _IDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | +|_objectIDs_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_objectPaths_ |0..1 (L) |WO |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_description_ |0..1 |RW |See clause 9.6.15 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | |_cellularNetworkBearer_ |0..1 |RW |Indicates the cellular network bearer used for the current cellular communication session. | @@ -1010,414 +927,364 @@ The _[_ _mobileNetwork_ _]_ resource shall contain the attributes specified in |_coverageEnhancementLevel_ |0..1 |RW |Indicates the Coverage Enhancement Level of the UE in the serving cell. The Coverage Enhancement levels are defined and specified in 3GPP 36.331 <a href="#_ref_16">[16]</a> and 36.213 <a href="#_ref_17">[17]</a>. | - - ## 7.2 Resource-Type specific procedures and definitions ### 7.2.1 Introduction -The present clause defines the resource-type specific details of the resource representations and protocol procedures for each <_mgmtObj_ > specialization defined in clause 7.1. +The present clause defines the resource-type specific details of the resource representations and protocol procedures for each _<mgmtObj>_ specialization defined in clause 7.1. ### 7.2.2 Resource [registration] #### 7.2.2.1 Introduction -This specialization of <_mgmtObj_ > is used to convey the service layer configuration information needed to register an AE or CSE with a Registrar CSE. +This specialization of _<mgmtObj>_ is used to convey the service layer configuration information needed to register an AE or CSE with a Registrar CSE. -**Table 7.2.2.1-1: Data Type Definition of [_registration_ ]**<a name="table_7.2.2.1-1"></a> +**Table 7.2.2.1-1: Data Type Definition of _[registration]_**<a name="table_7.2.2.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |registration |DCFG-registration.xsd | | - - -**Table 7.2.2.1-2: Resource specific attributes of [_registration_ ]**<a name="table_7.2.2.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | -+:===========================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================+:======================+:==============+:==============================================================+:=========================================================================================================================================================================================================================================================+ -| | Create | Update | | | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1020 (registration). | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| originatorID | O | O | m2m:ID | CSE-ID of the CSE hosted on the ASN/MN or the AE-ID of an AE hosted on an ASN/MN or ADN node.\ | -| | | | | If the setting is for a CSE, then this attribute shall be present. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| pointOfAccess | O | O | m2m:poaList | The point of access URI of the Registrar CSE.\ | -| | | | | Note; protocol binding is determined from the protocol schema in this URI. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _CSEBase_ | O | O | xs:anyURI | No Defaults. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| _CSE-ID_ | O | O | m2m:ID | No Defaults. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| appID | O | O | m2m:ID | The APP\_ID of an AE. This attribute shall only be present when this resource is used for the registration of an AE. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| externalID | O | O | m2m:externalID | The M2M-Ext-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS0001 <a href="#_ref_2">[2]</a>. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| Trigger-Recipient-ID | O | O | m2m:triggerRecipientID | The Trigger-Recipient-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| mgmtLink | O | O | m2m:mgmtLinkRef | 1 link to a [_authenticationProfile_ ] resource instance. See note. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| M2M-Sub-ID | O | NP | m2m:ID | | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| NOTE: The SUID in the linked [_authenticationProfile_ ] instance constrains the security framework to be used with the Authentication Profile. The security frameworks used with the [registration] resource are Security Association Establishment Frameworks (SAEF). The entity composing a [_registration_ ] instance is expected to confirm that the linked Authentication Profile contains a SUID corresponding to an SAEF. The SAEF SUIDs are the values 12, 22, 32 or 42 as defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | -+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------+---------------+---------------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - +**Table 7.2.2.1-2: Resource specific attributes of _[registration]_**<a name="table_7.2.2.1-2"></a> + + ++------+-----+-----+-----+-----+ +| H1 | H2 | H3 | +| +-----+-----+ | +| | H4 | H5 | | ++:=====+:====+:====+:====+:====+ +| D1 | D2 | D3 | D4 | D5 | ++------+-----+-----+-----+-----+ + + ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| Attribute Name | Request Optionality | Data Type | +| +-----------+-----------+ | +| | Create | Update | | ++:=======================+:==========+:==========+:=====================================================+:=====================================================================================================================================================================================================================================================================================================================================================================================================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1020 (registration). | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| originatorID | O | O | m2m:ID | CSE-ID of the CSE hosted on the ASN/MN or the AE-ID of an AE hosted on an ASN/MN or ADN node.\ | +| | | | | If the setting is for a CSE, then this attribute shall be present. | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| pointOfAccess | O | O | m2m:poaList | The point of access URI of the Registrar CSE.\ | +| | | | | Note; protocol binding is determined from the protocol schema in this URI. | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _CSEBase_ | O | O | xs:anyURI | No Defaults. | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| _CSE-ID_ | O | O | m2m:ID | No Defaults. | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| appID | O | O | m2m:ID | The APP\_ID of an AE. This attribute shall only be present when this resource is used for the registration of an AE. | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| externalID | O | O | m2m:externalID | The M2M-Ext-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS0001 [\[2\]](#_ref_2). | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| Trigger-Recipient-ID | O | O | m2m:triggerRecipientID | The Trigger-Recipient-ID of the ASN/MN CSE. This attribute can be present when the originatorID is a CSE-ID and the CSE uses the dynamic registration defined in clause 7.1.10 Trigger Recipient Identifier of oneM2M TS-0001 [\[2\]](#_ref_2). | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| mgmtLink | O | O | m2m:mgmtLinkRef | 1 link to a _[authenticationProfile]_ resource instance. See note. | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| M2M-Sub-ID | O | NP | m2m:ID | | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| NOTE: The SUID in the linked _[authenticationProfile]_ instance constrains the security framework to be used with the Authentication Profile. The security frameworks used with the [registration] resource are Security Association Establishment Frameworks (SAEF). The entity composing a _[registration]_ instance is expected to confirm that the linked Authentication Profile contains a SUID corresponding to an SAEF. The SAEF SUIDs are the values 12, 22, 32 or 42 as defined in oneM2M TS-0004 [\[4\]](#_ref_4). | ++------------------------+-----------+-----------+------------------------------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ #### 7.2.2.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. In addition to the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource following check shall be done in CREATE and UPDATE operation: +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. In addition to the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource following check shall be done in CREATE and UPDATE operation: -If _appID_ attribute is set to a value starting with other than 'r', 'R' or 'N' then the Hosting CSE shall reject the request with "BAD\_REQUEST" **_Response Status Code_** . +If _appID_ attribute is set to a value starting with other than 'r', 'R' or 'N' then the Hosting CSE shall reject the request with "BAD\_REQUEST" **_Response Status Code_** . -> NOTE: Use of 'r' will be forbidden when subsequently registering an AE that supports release 4 or above. +> NOTE: Use of 'r' will be forbidden when subsequently registering an AE that supports release 4 or above. ### 7.2.3 Resource [dataCollection] #### 7.2.3.1 Introduction -**Table 7.2.3.1-1: Data Type Definition of [_dataCollection_ ]**<a name="table_7.2.3.1-1"></a> +**Table 7.2.3.1-1: Data Type Definition of _[dataCollection]**<a name="table_7.2.3.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |dataCollection |DCFG-dataCollection.xsd | | - - - -**Table 7.2.3.1-2: Resource specific attributes of [_dataCollection_ ]**<a name="table_7.2.3.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | **Default Value and Constraints** | -+:==============================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================================+:==========================+:==================+:==============================================================+:============================================================================================================================================================================================================================================+ -| **Attribute Name** | **C** **reate** | **U** **pdate** | **Data Type** | **Default Value and Constraints** | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1021 (dataCollection). | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| containerPath | M | O | m2m:ID | The URI of the <container> resource in the hosting CSE that stores the data transmitted by the device. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| reportingSchedule | O | O | m2m:scheduleEntries | The schedule, used to transmit the measured or collected data to the Hosting CSE. \ | -| | | | | If the entity that reports the data misses a reporting interval, the entity shall wait until the next interval to report the data. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| measurementSchedule | O | O | m2m:scheduleEntries | The schedule, that the device will use to collect or measure the data.\ | -| | | | | If the entity that measures or collects the data misses a measurement interval, the entity shall wait until the next interval to collect or measure the data. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| mgmtLink | O | O | m2m:mgmtLinkRef | 1 link to a [authenticationProfile]. See note. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ -| NOTE: The SUID in the linked [_authenticationProfile_ ] instance constrains the security framework to be used with the Authentication Profile. The security frameworks used with the [_dataCollection_ ] resource are End-to-End Security of Primitives (ESPrim). The entity composing a [_dataCollection_ ] instance is expected to confirm that the linked Authentication Profile contains a SUID corresponding to ESPrim. The SUIDs corresponding to ESPrim security frameworks are the values 13, 23, 33 or 43 as defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ - +**Table 7.2.3.1-2: Resource specific attributes of _[dataCollection]_**<a name="table_7.2.3.1-2"></a> + ++---------------------------+-----------------------------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| Attribute Name | Request Optionality | Data Type | +| +---------------------------+-------------------+ | +| | Create | Update | | ++:==========================+:==========================+:==================+:==============================================================+:===================================================================================================================================================================================================================================================================================================================================================================================================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1021 (dataCollection). | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| containerPath | M | O | m2m:ID | The URI of the <container> resource in the hosting CSE that stores the data transmitted by the device. | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| reportingSchedule | O | O | m2m:scheduleEntries | The schedule, used to transmit the measured or collected data to the Hosting CSE. \ | +| | | | | If the entity that reports the data misses a reporting interval, the entity shall wait until the next interval to report the data. | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| measurementSchedule | O | O | m2m:scheduleEntries | The schedule, that the device will use to collect or measure the data.\ | +| | | | | If the entity that measures or collects the data misses a measurement interval, the entity shall wait until the next interval to collect or measure the data. | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| mgmtLink | O | O | m2m:mgmtLinkRef | 1 link to a [authenticationProfile]. See note. | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ +| NOTE: The SUID in the linked _[authenticationProfile]_ instance constrains the security framework to be used with the Authentication Profile. The security frameworks used with the _[dataCollection]_ resource are End-to-End Security of Primitives (ESPrim). The entity composing a _[dataCollection]_ instance is expected to confirm that the linked Authentication Profile contains a SUID corresponding to ESPrim. The SUIDs corresponding to ESPrim security frameworks are the values 13, 23, 33 or 43 as defined in oneM2M TS-0004 [\[4\]](#_ref_4). | ++---------------------------+---------------------------+-------------------+---------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ #### 7.2.3.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.4 Resource [authenticationProfile] #### 7.2.4.1 Introduction -**Table 7.2.4.1-1: Data Type Definition of [_authenticationProfile_ ]**<a name="table_7.2.4.1-1"></a> +**Table 7.2.4.1-1: Data Type Definition of _[authenticationProfile]_**<a name="table_7.2.4.1-1"></a> -|**Data Type** **ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |authenticationProfile |DCFG-authenticationProfile.xsd | | - - -**Table 7.2.4.1-2: Resource specific attributes of [_authenticationProfile_ ]**<a name="table_7.2.4.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | **Default Value and Constraints** | -+:=====================+:==========================+:==============+:==============================================================+:=============================================+ -| **Attribute Name** | **Create** | **Update** | **Data Type** | **Default Value and Constraints** | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1022 (authenticationProfile). | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| objectID | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| SUID | M | NP | m2m:suid | Allowed values are listed in table 7.1.43. | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| TLSCiphersuites | O | O | dcfg:listOfTLSCiphersuite | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| symmKeyID | O | NP | sec:credentialID | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| symmKeyValue | O | NP | xs:hexBinary | The minimum key length is 256 bits. | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| MAFKeyRegLabels | O | NP | m2m:labels | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| MAFKeyRegDuration | O | NP | xs:duration | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| mycertFingerprint | O | NP | dcfg:niURI or dcfg:nihURI | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| rawPubKeyID | O | NP | dcfg:niURI or dcfg:nihURI | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| M2M-Sub-ID | O | NP | m2m:ID | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ -| mgmtLink | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+---------------+---------------------------------------------------------------+----------------------------------------------+ - - - -**Table 7.2.4.13: Child resources of [_authenticationProfile_ ] resource**<a name="table_7.2.4.13"></a> - -|**Child Resource Type** |**Child Resource Name** |**Multiplicity** |**Ref. to in Resource Type Definition** | +**Table 7.2.4.1-2: Resource specific attributes of _[authenticationProfile]_**<a name="table_7.2.4.1-2"></a> + ++----------------------+---------------------+------------------------------------------------------+----------------------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:=====================================================+:=============================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1022 (authenticationProfile). | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| objectID | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| SUID | M | NP | m2m:suid | Allowed values are listed in table 7.1.43. | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| TLSCiphersuites | O | O | dcfg:listOfTLSCiphersuite | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| symmKeyID | O | NP | sec:credentialID | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| symmKeyValue | O | NP | xs:hexBinary | The minimum key length is 256 bits. | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| MAFKeyRegLabels | O | NP | m2m:labels | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| MAFKeyRegDuration | O | NP | xs:duration | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| mycertFingerprint | O | NP | dcfg:niURI or dcfg:nihURI | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| rawPubKeyID | O | NP | dcfg:niURI or dcfg:nihURI | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| M2M-Sub-ID | O | NP | m2m:ID | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ +| mgmtLink | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+----------------------------------------------+ + + +**Table 7.2.4.13: Child resources of _[authenticationProfile]_ resource**<a name="table_7.2.4.13"></a> + +|Child Resource Type |Child Resource Name |Multiplicity |Ref. to in Resource Type Definition | |-|-|-|-| |<subscription> |[variable] |0..n |Clause 7.4.8 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | - - #### 7.2.4.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.5 Resource [myCertFileCred] #### 7.2.5.1 Introduction -**Table 7.2.5.1-1: Data Type Definition of [_myCertFileCred_ ]**<a name="table_7.2.5.1-1"></a> +**Table 7.2.5.1-1: Data Type Definition of _[myCertFileCred]_**<a name="table_7.2.5.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |myCertFileCred |DCFG-myCertFileCred.xsd | | - - - - - - - - - - - - - -**Table 7.2.5.1-2: Resource specific attributes of [_myCertFileCred_ ]**<a name="table_7.2.5.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | **Default Value and Constraints** | -+:=====================+:==========================+:==================+:==============================================================+:====================================================================================+ -| **Attribute Name** | **C** **reate** | **U** **pdate** | **Data Type** | **Default Value and Constraints** | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1023 (myCertFileCred) | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| objectID | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| SUIDs | M | O | xs:list of m2m:suid | Allowed values are listed in table 7.1.5-3. | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| myCertFileFormat | M | NP | xs:anyURI | Media Type of myCertFileContent attribute. Default is "application/pkcs7-mime". | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ -| myCertFileContent | M | NP | xs:string | Certificate or certificate chain. Default media-type is "application/pkcs7-mime". | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------------------------------------------------------+ - - - - - -**Table 7.2.5.13: Child resources of [_myCertFileCred_ ] resource**<a name="table_7.2.5.13"></a> - -|**Child Resource Type** |**Child Resource Name** |**Multiplicity** |**Ref. to in Resource Type Definition** | +**Table 7.2.5.1-2: Resource specific attributes of _[myCertFileCred]_**<a name="table_7.2.5.1-2"></a> + ++----------------------+---------------------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:=====================================================+:====================================================================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1023 (myCertFileCred) | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| objectID | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| SUIDs | M | O | xs:list of m2m:suid | Allowed values are listed in table 7.1.5-3. | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| myCertFileFormat | M | NP | xs:anyURI | Media Type of myCertFileContent attribute. Default is "application/pkcs7-mime". | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ +| myCertFileContent | M | NP | xs:string | Certificate or certificate chain. Default media-type is "application/pkcs7-mime". | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------------------------------------------------------------+ + + +**Table 7.2.5.13: Child resources of _[myCertFileCred]_ resource**<a name="table_7.2.5.13"></a> + +|Child Resource Type |Child Resource Name |Multiplicity |Ref. to in Resource Type Definition | |-|-|-|-| |<subscription> |[variable] |0..n |Clause 7.4.8 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | - - #### 7.2.5.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.6 Resource [trustAnchorCred] #### 7.2.6.1 Introduction -**Table 7.2.6.1-1: Data Type Definition of [_trustAnchorCred_ ]**<a name="table_7.2.6.1-1"></a> +**Table 7.2.6.1-1: Data Type Definition of _[trustAnchorCred]_**<a name="table_7.2.6.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |trustAnchorCred |DCFG-trustAnchorCred.xsd | | +**Table 7.2.6.1-2: Resource specific attributes of _[trustAnchorCred]_**<a name="table_7.2.6.1-2"></a> ++----------------------+---------------------+------------------------------------------------------+-------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:=====================================================+:==============================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1024 (trustAnchorCred) | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------+ +| objectID | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------+ +| certFingerprint | M | NP | dcfg:niURI | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------+ +| URI | M | O | xs:anyURI | | ++----------------------+---------+-----------+------------------------------------------------------+-------------------------------+ -**Table 7.2.6.1-2: Resource specific attributes of [_trustAnchorCred_ ]**<a name="table_7.2.6.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | **Default Value and Constraints** | -+:=====================+:==========================+:==================+:==============================================================+:====================================+ -| **Attribute Name** | **C** **reate** | **U** **pdate** | **Data Type** | **Default Value and Constraints** | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1024 (trustAnchorCred) | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| objectID | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| certFingerprint | M | NP | dcfg:niURI | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ -| URI | M | O | xs:anyURI | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+-------------------------------------+ +**Table 7.2.6.13: Child resources of _[trustAnchorCred]_ resource**<a name="table_7.2.6.13"></a> - -**Table 7.2.6.13: Child resources of [_trustAnchorCred_ ] resource**<a name="table_7.2.6.13"></a> - -|**Child Resource Type** |**Child Resource Name** |**Multiplicity** |**Ref. to in Resource Type Definition** | +|Child Resource Type |Child Resource Name |Multiplicity |Ref. to in Resource Type Definition | |-|-|-|-| |<subscription> |[variable] |0..n |Clause 7.4.8 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | - #### 7.2.6.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. + +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.7 Resource [MAFClientRegCfg] #### 7.2.7.1 Introduction -**Table 7.2.7.1-1: Data Type Definition of [_MAFClientRegCfg_ ]**<a name="table_7.2.7.1-1"></a> +**Table 7.2.7.1-1: Data Type Definition of _[MAFClientRegCfg]_**<a name="table_7.2.7.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |MAFClientRegCfg |DCFG-MAFClientRegCfg.xsd | | - - -**Table 7.2.7.1-2: Resource specific attributes of [_MAFClientRegCfg_ ]**<a name="table_7.2.7.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | **Default Value and Constraints** | -+:==============================================================================================================================+:==========================+:==============+:===============================================================+:============================================================+ -| **Attribute Name** | **Create** | **Update** | **Data Type** | **Default Value and Constraints** | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1025 (MAFClientRegCfg) | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| fqdn | M | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| adminFQDN | M | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| httpPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | At least one of these attributes shall be present | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| coapPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | At least one of these attributes shall be present | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| websocketPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | At least one of these attributes shall be present | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| mgmtLink | M | O | m2m:mgmtLinkRef | 1 link to a [_authenticationProfile_ ] resources instance | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ -| NOTE: For further details of these attributes, see clauses 8.8.3.2 and 12.4.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+---------------+----------------------------------------------------------------+-------------------------------------------------------------+ - - - -**Table 7.2.7.13: Child resources of [_MAFClientRegCfg_ ] resource**<a name="table_7.2.7.13"></a> - -|**Child Resource Type** |**Child Resource Name** |**Multiplicity** |**Ref. to in Resource Type Definition** | +**Table 7.2.7.1-2: Resource specific attributes of _[MAFClientRegCfg]_**<a name="table_7.2.7.1-2"></a> + ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:======================================================+:============================================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1025 (MAFClientRegCfg) | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| fqdn | M | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| adminFQDN | M | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| httpPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | At least one of these attributes shall be present | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| coapPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | At least one of these attributes shall be present | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| websocketPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | At least one of these attributes shall be present | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| mgmtLink | M | O | m2m:mgmtLinkRef | 1 link to a _[authenticationProfile]_ resources instance | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ +| NOTE: For further details of these attributes, see clauses 8.8.3.2 and 12.4.2 of oneM2M TS-0003 [\[3\]](#_ref_3). | ++----------------------+---------+-----------+-------------------------------------------------------+-------------------------------------------------------------+ + +**Table 7.2.7.13: Child resources of __MAFClientRegCfg]_ resource**<a name="table_7.2.7.13"></a> + +|Child Resource Type |Child Resource Name |Multiplicity |Ref. to in Resource Type Definition | |-|-|-|-| |<subscription> |[variable] |0..n |Clause 7.4.8 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | - - #### 7.2.7.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.8 Resource [MEFClientRegCfg] #### 7.2.8.1 Introduction -**Table 7.2.8.1-1: Data Type Definition of [_MEFClientRegCfg_ ]**<a name="table_7.2.8.1-1"></a> +**Table 7.2.8.1-1: Data Type Definition of _[MEFClientRegCfg]_**<a name="table_7.2.8.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |MEFClientRegCfg |DCFG-MEFClientRegCfg.xsd | | - - -**Table 7.2.8.1-2: Resource specific attributes of [_MEFClientRegCfg_ ]**<a name="table_7.2.8.1-2"></a> - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | Default Value and Constraints | -+:==============================================================================================================================+:==========================+:==================+:===============================================================+:====================================================+ -| **Attribute Name** | **C** **reate** | **U** **pdate** | **Data Type** | Default Value and Constraints | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1026 (MEFClientRegCfg) | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| fqdn | M | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| adminFQDN | M | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| httpPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | At least one of these attributes shall be present | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| coapPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | At least one of these attributes shall be present | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| websocketPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 <a href="#_ref_3">[3]</a> | At least one of these attributes shall be present | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| mgmtLink | M | O | m2m:mgmtLinkRef | | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ -| NOTE: For further details of these attributes, see clauses 8.3.7.2 and 12.4.2 of oneM2M TS-0003 <a href="#_ref_3">[3]</a>. | -+-------------------------------------------------------------------------------------------------------------------------------+---------------------------+-------------------+----------------------------------------------------------------+-----------------------------------------------------+ - - - -**Table 7.2.8.13: Child resources of [_MEFClientRegCfg_ ] resource**<a name="table_7.2.8.13"></a> - -|**Child Resource Type** |**Child Resource Name** |**Multiplicity** |**Ref. to in Resource Type Definition** | +**Table 7.2.8.1-2: Resource specific attributes of _[MEFClientRegCfg]_**<a name="table_7.2.8.1-2"></a> + + ++----------------------+---------------------+-------------------------------------------------------+-----------------------------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:======================================================+:====================================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1026 (MEFClientRegCfg) | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| fqdn | M | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| adminFQDN | M | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| httpPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | At least one of these attributes shall be present | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| coapPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | At least one of these attributes shall be present | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| websocketPort | O | NP | See table 12.4.2-1 of oneM2M TS-0003 [\[3\]](#_ref_3) | At least one of these attributes shall be present | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| mgmtLink | M | O | m2m:mgmtLinkRef | | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ +| NOTE: For further details of these attributes, see clauses 8.3.7.2 and 12.4.2 of oneM2M TS-0003 [\[3\]](#_ref_3). | ++----------------------+---------+-----------+-------------------------------------------------------+-----------------------------------------------------+ + +**Table 7.2.8.13: Child resources of _[MEFClientRegCfg]_ resource**<a name="table_7.2.8.13"></a> + +|hild Resource Type |Child Resource Name |Multiplicity |Ref. to in Resource Type Definition | |-|-|-|-| |<subscription> |[variable] |0..n |Clause 7.4.8 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | - - #### 7.2.8.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<_mgmtObj_ > specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '_<mgmtObj>_ specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.9 Resource [OAuth2Authentication] @@ -1425,46 +1292,36 @@ When management is performed using technology specific protocols, the procedures #### 7.2.9.1 Introduction This specialization of <mgmtObj> is used to store access token and refresh token used in OAuth2 security protocol - **Table 7.2.9.1-1: Data Type Definition of [OAuth2Authentication]**<a name="table_7.2.9.1-1"></a> -|**Data Type ID** |**File Name** |**Note** | +|Data Type ID |File Name |Note | |-|-|-| |OAuth2Authentication |DCFG-OAuth2.xsd | | - - - - - - **Table 7.2.9.1-2: Resource specific attributes of [OAuth2Authentication]**<a name="table_7.2.9.1-2"></a> -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | Default Value and Constraints | -+:=====================+:==========================+:==================+:==============================================================+:================================+ -| **Attribute Name** | **C** **reate** | **U** **pdate** | **Data Type** | Default Value and Constraints | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1027 (OAuth2Authentication) | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| accessToken | M | O | xs:string | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| refreshToken | M | O | xs:string | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ - ++----------------------+---------------------+------------------------------------------------------+---------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:=====================================================+:================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1027 (OAuth2Authentication) | ++----------------------+---------+-----------+------------------------------------------------------+---------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+---------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+---------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+------------------------------------------------------+---------------------------------+ +| accessToken | M | O | xs:string | | ++----------------------+---------+-----------+------------------------------------------------------+---------------------------------+ +| refreshToken | M | O | xs:string | | ++----------------------+---------+-----------+------------------------------------------------------+---------------------------------+ #### 7.2.9.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 in oneM2M TS-0004 <a href="#_ref_4">[4]</a>,'<_mgmtObj_ > specific procedures' shall be used. There are no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 in oneM2M TS-0004 <a href="#_ref_4">[4]</a>,'_<mgmtObj> specific procedures' shall be used. There are no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. ### 7.2.10 Resource [wifiClient] @@ -1472,7 +1329,6 @@ When management is performed using technology specific protocols, the procedures #### 7.2.10.1 Introduction This specialization of <mgmtObj> is used to store configuration of Wi-Fi® connection on the client device. - **Table 7.2.10.11: Data Type Definition of [wifiClient]**<a name="table_7.2.10.11"></a> |Data Type ID |File Name |Note | @@ -1480,48 +1336,43 @@ This specialization of <mgmtObj> is used to store configuration of Wi-Fi® |wifiClient |DCFG-wifiClient.xsd | | - - **Table 7.2.10.12: Resource specific attributes of [wifiClient]**<a name="table_7.2.10.12"></a> -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| **Attribute Name** | **Request Optionality** | **Data Type** | Default Value and Constraints | -+:=====================+:==========================+:==================+:==============================================================+:================================+ -| **Attribute Name** | **C** **reate** | **U** **pdate** | **Data Type** | Default Value and Constraints | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | 1028 (wifiClient) | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| ssid | M | O | dcfg:ssid | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| credentials | O | O | dcfg:wifiCredentials | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| macAddress | O | O | xs:string | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| channel | O | O | xs:integer | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| update | O | O | xs:boolean | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| scan | M | O | xs:boolean | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| toggleRadioStatus | O | O | xs:boolean | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| scanResult | O | O | dcfg:listOfSsids | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| updateStatus | O | O | m2m:actionStatus | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| connectionStatus | O | O | dcfg:wifiConnectionStatus | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ -| radioStatus | O | O | xs:boolean | | -+----------------------+---------------------------+-------------------+---------------------------------------------------------------+---------------------------------+ - ++----------------------+---------------------+-------------------------------------------------------+---------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=====================+:========+:==========+:======================================================+:================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | 1028 (wifiClient) | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4) | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| ssid | M | O | dcfg:ssid | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| credentials | O | O | dcfg:wifiCredentials | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| macAddress | O | O | xs:string | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| channel | O | O | xs:integer | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| update | O | O | xs:boolean | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| scan | M | O | xs:boolean | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| toggleRadioStatus | O | O | xs:boolean | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| scanResult | O | O | dcfg:listOfSsids | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| updateStatus | O | O | m2m:actionStatus | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| connectionStatus | O | O | dcfg:wifiConnectionStatus | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| radioStatus | O | O | xs:boolean | | ++----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ #### 7.2.10.2 Resource specific procedure on CRUD operations @@ -1531,8 +1382,8 @@ When management is performed using technology specific protocols, the procedures ### 7.2.11 Resource [credentials] #### 7.2.11.1 Introduction -This specialization of <mgmtObj> is used to store credentials on the client device for authentications. +This specialization of <mgmtObj> is used to store credentials on the client device for authentications. **Table 7.2.11.11: Data Type Definition of [credentials]**<a name="table_7.2.11.11"></a> @@ -1541,45 +1392,40 @@ This specialization of <mgmtObj> is used to store credentials on the client d |credentials |DCFG-credentials-v4\_0\_0.xsd | | - - **Table 7.2.11.12: Resource specific attributes of [credentials]**<a name="table_7.2.11.12"></a> -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | -+:===================+:======================+:==============+:===============================================================+:================================+ -| Attribute Name | Create | Update | Data Type | Default Value and Constraints | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | 1029 (credentials) | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| purpose | O | O | xs:string | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| credentialID | O | O | xs:string | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| credentialSecret | O | O | xs:string | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| credentialToken | O | O | Xs:string | | -+--------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ ++--------------------+---------------------+-------------------------------------------------------+---------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:===================+:========+:==========+:======================================================+:================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | 1029 (credentials) | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| purpose | O | O | xs:string | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| credentialID | O | O | xs:string | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| credentialSecret | O | O | xs:string | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| credentialToken | O | O | Xs:string | | ++--------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ #### 7.2.11.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. - +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. ### 7.2.12 Resource [SIM] #### 7.2.12.1 Introduction -This specialization of <mgmtObj> is used to store configuration of Subscriber Identification Module (SIM) and status information. +This specialization of <mgmtObj> is used to store configuration of Subscriber Identification Module (SIM) and status information. **Table 7.2.12.11: Data Type Definition of [SIM]**<a name="table_7.2.12.11"></a> @@ -1587,44 +1433,41 @@ This specialization of <mgmtObj> is used to store configuration of Subscriber |-|-|-| |SIM |DCFG-SIM.xsd | | - - - **Table 7.2.12.12: Resource specific attributes of [SIM]**<a name="table_7.2.12.12"></a> -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | -+:======================+:======================+:==============+:===============================================================+:================================+ -| Attribute Name | Create | Update | Data Type | Default Value and Constraints | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | 1030 (SIM) | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| imsi | O | O | dcfg:imsi | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| iccid | M | NP | dcfg:iccid | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| simStatus | O | O | dcfg:simStatus | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| simType | O | O | dcfg:simType | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| serviceProviderName | O | O | xs:string | | -+-----------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ ++-----------------------+---------------------+-------------------------------------------------------+---------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:======================+:========+:==========+:======================================================+:================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | 1030 (SIM) | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| imsi | O | O | dcfg:imsi | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| iccid | M | NP | dcfg:iccid | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| simStatus | O | O | dcfg:simStatus | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| simType | O | O | dcfg:simType | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| serviceProviderName | O | O | xs:string | | ++-----------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ #### 7.2.12.2 Resource specific procedure on CRUD operations + When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<mgmtObj> specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS 0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ### 7.2.13 Resource [mobileNetwork] #### 7.2.13.1 Introduction + This specialization of <mgmtObj> is used to store configuration of the currently connected mobile network. @@ -1634,88 +1477,76 @@ This specialization of <mgmtObj> is used to store configuration of the curren |-|-|-| |mobileNetwork |DCFG-mobileNetwork.xsd | | - - - **Table 7.2.12.12: Resource specific attributes of [mobileNetwork]**<a name="table_7.2.12.12"></a> -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | -+:=============================+:======================+:==============+:===============================================================+:================================+ -| Attribute Name | Create | Update | Data Type | Default Value and Constraints | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | 1031 (mobileNetwork) | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| description | O | O | See clause 7.4.15 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| cellularNetworkBearer | O | O | dcfg:cellularNetworkBearerType | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _radioSignalStrength_ | O | O | xs:integer | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _linkQuality_ | O | O | xs:integer | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _ipAddresses_ | O | O | list of m2m:ipAddress | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _routerIPAddresses_ | O | O | list of m2m:ipAddress | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _apn_ | O | O | dcfg:apn | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _cellID_ | O | O | xs:integer | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _smnc_ | O | O | xs:integer | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _smcc_ | O | O | xs:integer | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _lac_ | O | O | dcfg:lac | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ -| _coverageEnhancementLevel_ | O | O | dcfg:coverageEnhancementLevel | | -+------------------------------+-----------------------+---------------+----------------------------------------------------------------+---------------------------------+ - ++------------------------------+---------------------+-------------------------------------------------------+---------------------------------+ +| Attribute Name | Request Optionality | Data Type | Default Value and Constraints | +| +---------+-----------+ | | +| | Create | Update | | | ++:=============================+:========+:==========+:======================================================+:================================+ +| mgmtDefinition | M | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | 1031 (mobileNetwork) | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectIDs | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| objectPaths | O | NP | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| description | O | O | See clause 7.4.15 of oneM2M TS-0004 [\[4\]](#_ref_4). | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| cellularNetworkBearer | O | O | dcfg:cellularNetworkBearerType | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _radioSignalStrength_ | O | O | xs:integer | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _linkQuality_ | O | O | xs:integer | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _ipAddresses_ | O | O | list of m2m:ipAddress | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _routerIPAddresses_ | O | O | list of m2m:ipAddress | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _apn_ | O | O | dcfg:apn | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _cellID_ | O | O | xs:integer | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _smnc_ | O | O | xs:integer | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _smcc_ | O | O | xs:integer | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _lac_ | O | O | dcfg:lac | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ +| _coverageEnhancementLevel_ | O | O | dcfg:coverageEnhancementLevel | | ++------------------------------+---------+-----------+-------------------------------------------------------+---------------------------------+ #### 7.2.13.2 Resource specific procedure on CRUD operations -When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<mgmtObj> specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS 0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. - - - - +When management is performed using technology specific protocols, the procedures defined in clause 7.4.15.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>, '<mgmtObj> specific procedures' shall be used. There is no change from the generic procedures in clause 7.2.2 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> for operations on this resource. oneM2M TS-0005 <a href="#_ref_5">[5]</a> and oneM2M TS 0006 <a href="#_ref_6">[6]</a> provide the mapping of these resources into the technology specific protocol data model. ## 7.3 Data formats for device configuration ### 7.3.1 Introduction + Clause 7.3 defines data formats of resource attributes and parameters used in present document. Any data types of XML elements defined for use in present document shall be one of name spaces in table 7.3.1-1. - **Table 7.3.1-1: Namespaces used in present document**<a name="table_7.3.1-1"></a> -|**Name space** |**prefix** |**N** **ame** **space definition** | +|Name space |prefix |Namespace definition | |-|-|-| |oneM2M protocol CDT |m2m: |http://www.onem2m.org/xml/protocol | |Device Configuration |dcfg: |http://www.onem2m.org/xml/deviceConfig | |oneM2M Security |sec: |http://www.onem2m.org/xml/securityProtocols | - - ### 7.3.2 Simple oneM2M data types for device configuration -Table 7.3.2-1 describes simple data type definitions specific to security. The types in table 7.3.2-1 are either: +Table 7.3.2-1 describes simple data type definitions specific to security. The types in table 7.3.2-1 are either: - Atomic data types derived from XML Schema data types by restrictions other than enumeration. - List data types constructed from other XML Schema or oneM2M-defined atomic data types. **Table 7.3.2-1: oneM2M simple data types for device configuration**<a name="table_7.3.2-1"></a> -|**XSD type name** |**Used for** |**Examples** |**Description** | +|XSD type name |Used for |Examples |Description | |-|-|-|-| |dcfg:TLSCiphersuite |A TLS Ciphersuite identifier |C0A5 |Four hexadecimal characters representing a TLS Cipher suite identifier. The list of TLS cipher suites identifiers can be found at the IANA TLS Cipher Suite Registry <a href="#_ref_8">[8]</a>. | |dcfg:ListOfTLSCiphersuite |A list of TLS Ciphersuite identifiers | |xs:list of elements of data type dcfg:TLSCiphersuite. | @@ -1729,14 +1560,11 @@ Table 7.3.2-1 describes simple data type definitions specific to security. The t |dcfg:lac |Location Area Code for a cellular network |0x0523 |A Location Area Code is a fixed length code of 2 octets identifying a location area. The data type is xs:integer. | - - - ### 7.3.3 Enumerated oneM2M data types for device configuration #### 7.3.3.1 dcfg:wifiConnectionStatus -Used to indicate Wi-Fi® connection status. +Used to indicate Wi-Fi® connection status. **Table 7.3.3.11: Interpretation of dcfg:wifiConnectionStatus**<a name="table_7.3.3.11"></a> @@ -1751,12 +1579,9 @@ Used to indicate Wi-Fi® connection status. |6 |Lost | | - - #### 7.3.3.2 dcfg:wifiEncryptionType Used for indicating which Wi-Fi® encryption protocol is used to provide security in wireless network. - **Table 7.3.3.2-1: Interpretation of dcfg:wifiEncyrptionType**<a name="table_7.3.3.2-1"></a> |Value |Interpretation |Note | @@ -1771,13 +1596,9 @@ Used for indicating which Wi-Fi® encryption protocol is used to provide secu |8 |WPA3 Enterprise | | - - #### 7.3.3.3 dcfg:simStatus -Used for indicating a SIM status. - - +Used for indicating a SIM status. **Table 7.3.3.3-1: Interpretation of dcfg:simStatus**<a name="table_7.3.3.3-1"></a> @@ -1787,13 +1608,9 @@ Used for indicating a SIM status. |1 |active | | - - #### 7.3.3.4 dcfg:simType -Used for indicating a SIM type. - - +Used for indicating a SIM type. **Table 7.3.3.4-1: Interpretation of dcfg:simType**<a name="table_7.3.3.4-1"></a> @@ -1806,9 +1623,8 @@ Used for indicating a SIM type. #### 7.3.3.5 dcfg:cellularNetworkBearerType -Used for indicating a Cellular Network Bearer type. - +Used for indicating a Cellular Network Bearer type. **Table 7.3.3.5-1: Interpretation of dcfg:cellularNetworkBearerType**<a name="table_7.3.3.5-1"></a> @@ -1825,13 +1641,9 @@ Used for indicating a Cellular Network Bearer type. |7 |NB-IoT | | - - #### 7.3.3.6 dcfg:coverageEnhancementLevel -Used for indicating a Coverage Enhancement Level. - - +Used for indicating a Coverage Enhancement Level. **Table 7.3.3.6-1: Interpretation of dcfg:coverageEnhancementLevel**<a name="table_7.3.3.6-1"></a> @@ -1844,17 +1656,15 @@ Used for indicating a Coverage Enhancement Level. |4 |Coverage Enhancement level 3 | | - - ### 7.3.4 Complex type definitions #### 7.3.4.1 dcfg:wifiCredentials -Used for credentials in [wifiClient] Management Object resource. Values contained in username, password, wep.key and wpa.psk attributes shall not be readable. Each Retrieve request shall be forwarded to device and from there the data shall be retrieved. +Used for credentials in [wifiClient] Management Object resource. Values contained in username, password, wep.key and wpa.psk attributes shall not be readable. Each Retrieve request shall be forwarded to device and from there the data shall be retrieved. **Table 7.3.4.1-1: Type Definition of dcfg:wifiCredentials**<a name="table_7.3.4.1-1"></a> -|**Element Path** |**Element Data Type** |**Multiplicity** |**Note** | +|Element Path |Element Data Type |Multiplicity |Note | |-|-|-|-| |encryptionType |dcfg:wifiEncryptionType |1 |Indicates type of encryption used to provide network security | |username |xs:string |0..1 |Indicates username used to authenticate user in WPA-Enterprise, WPA2-Enterprise or WPA3-Enterprise protocols<br />Only valid if encryptionType=6,7 or 8 | @@ -1863,135 +1673,133 @@ Used for credentials in [wifiClient] Management Object resource. Values containe |wpaPsk |xs:string |0..1 |Indicates WPA Pre Shared Key<br />Only valid if field encryptionType = 3,4 or 5 | - - # 8 Procedures ## 8.1 <mgmtObj> life cycle procedures ### 8.1.1 Introduction -The life cycle of the <_mgmtObj_ > resource in the Hosting CSE(IN-CSE) is established either through the: +The life cycle of the _<mgmtObj>_ resource in the Hosting CSE(IN-CSE) is established either through the: -- Provisioning of the <_mgmtObj_ > resource by the Configuration AE. -- Discovery of the <_mgmtObj_ > resource by the Hosting CSE using the methods described in clause 6.1. +- Provisioning of the _<mgmtObj>_ resource by the Configuration AE. +- Discovery of the _<mgmtObj>_ resource by the Hosting CSE using the methods described in clause 6.1. ### 8.1.2 Setting configuration information on <mgmtObj> resource -The Configuration AE is able to configure the <_mgmtObj_ > resources used for device configuration by either creating the <_mgmtObj_ > resource or updating existing <_mgmtObj_ > resources for the targeted AE or CSE. Likewise, the Configuration AE can delete the <_mgmtObj_ > resource as part of a decommissioning process. +The Configuration AE is able to configure the _<mgmtObj>_ resources used for device configuration by either creating the _<mgmtObj>_ resource or updating existing _<mgmtObj>_ resources for the targeted AE or CSE. Likewise, the Configuration AE can delete the _<mgmtObj>_ resource as part of a decommissioning process. -In some scenarios the <_mgmtObj_ > resource may already exist due to pre-provisioning or a previous discovery action by the IN-CSE's interaction with the Configuration IPE, DM Server or ASN/MN or ADN node. As such the Configuration AE needs to first discover if the <_mgmtObj_ > resource exists in the Hosting CSE. As <_mgmtObj_ > resources are represented under the <node> resource of the ASN/MN or ADN node, the discovery operation's scope can use the <node> resource within the discovery criteria. Based on the results of the discovery the Configuration AE will either create or update the <_mgmtObj_ > resource. Figure 8.1.2-1 depicts this flow. +In some scenarios the _<mgmtObj>_ resource may already exist due to pre-provisioning or a previous discovery action by the IN-CSE's interaction with the Configuration IPE, DM Server or ASN/MN or ADN node. As such the Configuration AE needs to first discover if the _<mgmtObj>_ resource exists in the Hosting CSE. As _<mgmtObj>_ resources are represented under the <node> resource of the ASN/MN or ADN node, the discovery operation's scope can use the <node> resource within the discovery criteria. Based on the results of the discovery the Configuration AE will either create or update the _<mgmtObj>_ resource. Figure 8.1.2-1 depicts this flow. - + -**Figure 8.1.2-1: Configuring attributes of a <_mgmtObj_ > resource** +**Figure 8.1.2-1: Configuring attributes of a _<mgmtObj>_ resource** -Likewise, the Configuration AE may use the same approach to discover when deleting the <_mgmtObj_ > resource as part of a decommissioning process or retrieval of the <_mgmtObj_ > resource. +Likewise, the Configuration AE may use the same approach to discover when deleting the _<mgmtObj>_ resource as part of a decommissioning process or retrieval of the _<mgmtObj>_ resource. -> NOTE: In order for the IN-CSE to forward the request onto the DM Server, the <_mgmtObj_ > resource is required to be configured with the path to the resource in the context of the technology specific protocol (e.g. LWM2M URI <a href="#_ref_i.4">[i.4]</a>, OMA-DM path <a href="#_ref_i.3">[i.3]</a>, BBF TR-069 path <a href="#_ref_i.2">[i.2]</a>). The fully qualified domain name can also be used if the IN-CSE does not know the address of the DM Server. +> NOTE: In order for the IN-CSE to forward the request onto the DM Server, the _<mgmtObj>_ resource is required to be configured with the path to the resource in the context of the technology specific protocol (e.g. LWM2M URI <a href="#_ref_i.4">[i.4]</a>, OMA-DM path <a href="#_ref_i.3">[i.3]</a>, BBF TR-069 path <a href="#_ref_i.2">[i.2]</a>). The fully qualified domain name can also be used if the IN-CSE does not know the address of the DM Server. ### 8.1.3 Management of <mgmtObj> resource on ASN/MN/ADN nodes #### 8.1.3.1 Introduction -Management of the <_mgmtObj_ > object resources on ASN/MN or ADN nodes may be managed using one of the architectural methods described in clause 6.1. +Management of the _<mgmtObj>_ object resources on ASN/MN or ADN nodes may be managed using one of the architectural methods described in clause 6.1. #### 8.1.3.2 Management using device management technologies -Clause 10.2.8 '<_mgmtObj_ > Resource Procedures' of oneM2M TS-0001 <a href="#_ref_2">[2]</a> describes the procedures for M2M Nodes to represent their technology specific data as oneM2M resources within the IN-CSE. +Clause 10.2.8 '_<mgmtObj>_ Resource Procedures' of oneM2M TS-0001 <a href="#_ref_2">[2]</a> describes the procedures for M2M Nodes to represent their technology specific data as oneM2M resources within the IN-CSE. - + + **Figure 8.1.3.2-1: Management using Device Management technologies** -1. The Configuration AE issues a request for <_mgmtObj_ > resource for an ASN/MN/ADN node that is managed using Device Management technologies. -1. The IN- CSE processes the request issued by Configuration AE. -1. The IN-CSE executes the Device Management command which is mapped from operation on <_mgmtObj_ > resource to external management technologies. +1. The Configuration AE issues a request for _<mgmtObj>_ resource for an ASN/MN/ADN node that is managed using Device Management technologies. +1. The IN-CSE processes the request issued by Configuration AE. +1. The IN-CSE executes the Device Management command which is mapped from operation on _<mgmtObj>_ resource to external management technologies. 1. The ASN/MN/ADN then creates, updates, deletes or retrieve the configuration parameters on the node, and returns the result of Device Management command. #### 8.1.3.3 Management using the Mca or Mcc reference point -Once M2M Service Layer operation is established between the AE or CSE and the Registrar/Hosting CSE, <_mgmtObj_ > resources may be managed using the Mca or Mcc reference point by the AE or CSE respectively subscribing to receive changes to the <_mgmtObj_ > resource using the subscription procedures defined in clause 10.2.11 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. Establishment of the M2M Service Layer operations includes actions such as establishing the appropriate security associations and registration of the CSEs and AEs. +Once M2M Service Layer operation is established between the AE or CSE and the Registrar/Hosting CSE, _<mgmtObj>_ resources may be managed using the Mca or Mcc reference point by the AE or CSE respectively subscribing to receive changes to the _<mgmtObj>_ resource using the subscription procedures defined in clause 10.2.11 of oneM2M TS-0001 <a href="#_ref_2">[2]</a>. Establishment of the M2M Service Layer operations includes actions such as establishing the appropriate security associations and registration of the CSEs and AEs. - + **Figure 8.1.3.3-1: Management using the Mca or Mcc reference point** -1. Once M2M Service Layer operation is established, the AE or CSE on the ASN/MN/ADN node subscribes to the <_mgmtObj_ > resource which is associated with the specific M2M Application functionality creating <subscription> resource. -1. When the Configurator AE creates, updates or delete the <_mgmtObj_ > resource, the Configuration AE issues a request on the <_mgmtObj_ > resource. -1. The Hosting CSE for the <_mgmtObj_ > resource performs the operation on the resource as Receiver. +1. Once M2M Service Layer operation is established, the AE or CSE on the ASN/MN/ADN node subscribes to the _<mgmtObj>_ resource which is associated with the specific M2M Application functionality creating <subscription> resource. +1. When the Configurator AE creates, updates or delete the _<mgmtObj>_ resource, the Configuration AE issues a request on the _<mgmtObj>_ resource. +1. The Hosting CSE for the _<mgmtObj>_ resource performs the operation on the resource as Receiver. 1. The Hosting CSE notifies the subscribed AE or CSE as the subscribed event message. 1. The AE or CSE configures the M2M Application on the ASN/MN or ADN node. -Alternatively, <_mgmtObj_ > specializations hosted by the IN-CSE may be announced to a CSE on a MN or ASN node depending on whether the <_mgmtObj_ > specialization type is announceable. If a <_mgmtObj_ > specialization type is not announceable, the MN or ASN nodes shall be managed using the subscription mechanism as shown in the Figure 8.1.3.3-1. - -The following <_mgmtObj_ > specializations specified in the present document are announceable (i.e. announceable variants of this resource type are defined in the XSD of the respective <_mgmtObj_ > specialization): +Alternatively, _<mgmtObj>_ specializations hosted by the IN-CSE may be announced to a CSE on a MN or ASN node depending on whether the _<mgmtObj>_ specialization type is announceable. If a _<mgmtObj>_ specialization type is not announceable, the MN or ASN nodes shall be managed using the subscription mechanism as shown in the Figure 8.1.3.3-1. +The following _<mgmtObj>_ specializations specified in the present document are announceable (i.e. announceable variants of this resource type are defined in the XSD of the respective _<mgmtObj>_ specialization): -- _[registration], [_ _dataCollection_ _]_ +- _[registration]_, _[dataCollection]_ -The following <_mgmtObj_ > specializations specified in the present document are not announceable (i.e. announceable variants of this resource type are not defined in the XSD of the respective <_mgmtObj_ > specialization): +The following _<mgmtObj>_ specializations specified in the present document are not announceable (i.e. announceable variants of this resource type are not defined in the XSD of the respective _<mgmtObj> specialization): - _[_ _authenticationProfile_ _], [_ _myCertFileCred_ _], [_ _trustAnchorCred_ _], [_ _MAFClientRegCfg_ _], [_ _MEFClientRegCfg_ _]_ _,_ _[OAuth2Authentication], [_ _wificlient_ _], [credentials]_ +- _[authenticationProfile]_, _[myCertFileCred]_, _[trustAnchorCred]_, _[MAFClientRegCfg]_, _[MEFClientRegCfg]_, _[OAuth2Authentication]_, _[wificlient]_, _[credentials]_ - -When a <_mgmtObj_ > specialization is announced to a CSE on a MN or ASN node, a <_mgmtObjAnnc_ > resource specialization is created in this CSE. The AE residing on the same node as the CSE may subscribe to the <_mgmtObjAnnc_ > specialization for receiving notifications when the original <_mgmtObj_ > is updated by the Configuration AE. +When a _<mgmtObj>_ specialization is announced to a CSE on a MN or ASN node, a _<mgmtObjAnnc>_ resource specialization is created in this CSE. The AE residing on the same node as the CSE may subscribe to the _<mgmtObjAnnc>_ specialization for receiving notifications when the original _<mgmtObj>_ is updated by the Configuration AE. #### 8.1.3.4 Management using the oneM2M IPE technology -When ASN/MN or ADN nodes are configured using a Configuration IPE, the ASN/MN/ADN may periodically request the Configuration IPE to configure the ASN/MN/ADN node. The method that the ASN/MN/ADN uses to periodically request to be configured is unspecified in the present document. Once the Configuration IPE receives the request from the ASN/MN/ADN node, the Configuration IPE shall send a retrieve request to the Hosting CSE to obtain the applicable specialization of <_mgmtObj_ > resources for the ASN/MN/ADN node. How the Configuration IPE maintains the mapping between the ASN/MN/ADN and the associated <_node_ > and <_mgmtObj_ > resources is unspecified in the present document. + +When ASN/MN or ADN nodes are configured using a Configuration IPE, the ASN/MN/ADN may periodically request the Configuration IPE to configure the ASN/MN/ADN node. The method that the ASN/MN/ADN uses to periodically request to be configured is unspecified in the present document. Once the Configuration IPE receives the request from the ASN/MN/ADN node, the Configuration IPE shall send a retrieve request to the Hosting CSE to obtain the applicable specialization of _<mgmtObj>_ resources for the ASN/MN/ADN node. How the Configuration IPE maintains the mapping between the ASN/MN/ADN and the associated _<node>_ and _<mgmtObj>_ resources is unspecified in the present document. - + **Figure 8.1.3.4-1: Management using oneM2M IPE technology** -1. The Configuration AE issues a CRUD request to <_mgmtObj_ > resource which is associated with the functionality of targeted field device. +1. The Configuration AE issues a CRUD request to _<mgmtObj>_ resource which is associated with the functionality of targeted field device. 1. The Hosting CSE processes the CRUD request. 1. When the ASN/MN/ADN determines it needs to be configured, the ASN/MN/ADN issues a request to the Configuration IPE. -1. The Configuration IPE determines <_mgmtObj_ > resource to refer as the source of configuration parameter for the targeted field device, and issues an operation on the <_mgmtObj_ > or <_node_ > resource. -1. When the RETRIEVE request is successfully performed, the Configuration IPE transforms the <_mgmtObj_ > resource into a form understandable by ASN/MN/ADN node. +1. The Configuration IPE determines _<mgmtObj>_ resource to refer as the source of configuration parameter for the targeted field device, and issues an operation on the _<mgmtObj>_ or _<node>_ resource. +1. When the RETRIEVE request is successfully performed, the Configuration IPE transforms the _<mgmtObj>_ resource into a form understandable by ASN/MN/ADN node. 1. The ASN/MN/ADN configures setting parameters for the M2M Application. -> NOTE: One possible method of exchanging information between the Configuration IPE and the ASN/MN/ADN is to simply serialize the <_mgmtObj_ > resource using the MIME content types defined in clause 6.7 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> 'oneM2M specific MIME media types'. + +> NOTE: One possible method of exchanging information between the Configuration IPE and the ASN/MN/ADN is to simply serialize the _<mgmtObj>_ resource using the MIME content types defined in clause 6.7 of oneM2M TS-0004 <a href="#_ref_4">[4]</a> 'oneM2M specific MIME media types'. ## 8.2 Obtaining authentication credential procedure -When an ASN/MN or ADN node is required to be authenticated, a mgmtLink 'authProfile' referring to the <_mgmtObj_ > resource specialization for maintaining the Authentication Profiles shall be provided. +When an ASN/MN or ADN node is required to be authenticated, a mgmtLink 'authProfile' referring to the _<mgmtObj>_ resource specialization for maintaining the Authentication Profiles shall be provided. The Authentication Profile contains following information: - - Choice of TLS options. -- mgmtLinkRef(s) to the <_mgmtObj_ > which provides information required to obtain the credential(s). +- mgmtLinkRef(s) to the _<mgmtObj>_ which provides information required to obtain the credential(s). -When an ASN/MN or ADN node is establishing the appropriate security associations, the <_mgmtObj_ > specialization for Authentication Profile shall be used to identify the security related settings. +When an ASN/MN or ADN node is establishing the appropriate security associations, the _<mgmtObj>_ specialization for Authentication Profile shall be used to identify the security related settings. -Actual credential shall be obtained using the information on the <_mgmtObj_ > specializations (Authentication Credential Configuration) which is referred by mgmtLinkRef(s) from Authentication Profile. +Actual credential shall be obtained using the information on the _<mgmtObj>_ specializations (Authentication Credential Configuration) which is referred by mgmtLinkRef(s) from Authentication Profile. - + **Figure 8.2-1: Relationship between 'Authentication Profile' and 'Authentication Credential Configuration(s)'** ## 8.3 AE and CSE registration procedure -When an ASN/MN or ADN node receives the information in the [_registration_ ] resource, the AE or CSE performs the registration procedure for that type of resource. If the resource is for CSE, then the CSE registration procedure which is defined in clause 10.1.1.2.1 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> is used. If the resource is for AE, the Application Entity Registration procedure defined in clause 10.1.1.2.2 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> is used. +When an ASN/MN or ADN node receives the information in the _[registration]_ resource, the AE or CSE performs the registration procedure for that type of resource. If the resource is for CSE, then the CSE registration procedure which is defined in clause 10.1.1.2.1 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> is used. If the resource is for AE, the Application Entity Registration procedure defined in clause 10.1.1.2.2 of oneM2M TS-0001 <a href="#_ref_2">[2]</a> is used. Required parameter for registration procedures is retrieved as attribute value of [registration] resource. **Table 8.3-1: Required [registration] resource parameters for registration**<a name="table_8.3-1"></a> -|**attribute of** **[** **_registration_** **]** |**parameter** **in** **oneM2M** **TS-0001 [** 2**]/TS** **0004 [** 4**]** | +|attribute of _[registration]_ |parameter in oneM2M TS-0001 <a href="#_ref_2">[2]</a>/TS0004 <a href="#_ref_4">[4]</a> | |-|-| |originatorID |From primitive parameter | |PoA |CSE-PoA (Point of Access) | @@ -1999,16 +1807,17 @@ Required parameter for registration procedures is retrieved as attribute value o - ## 8.4 Enabling data collection by [dataCollection] resource + When an AE needs to measure or collect data to be later reported to a Hosting CSE , report measured data to a CSE, the ASN/MN/ADN may be instructed when to measure/collect the data and then when to report the measured/collected data along with where to place the data within the Hosting CSE. -Once AE is configured with the [_dataCollection_ ] resource AE performs CREATE operation for new <_contentInstance_ > resource as the child resource of <container> resource which is specified as 'containerPath' attribute of [_dataCollection_ ] resource to report the measured/collected data. The frequency of collection/measurement and reporting are accordingly specified as 'reportingSchedule' and 'measurementSchedule' attributes of the [_dataCollection_ ] resource. +Once AE is configured with the _[dataCollection]_ resource AE performs CREATE operation for new _<contentInstance>_ resource as the child resource of <container> resource which is specified as 'containerPath' attribute of _[dataCollection]_ resource to report the measured/collected data. The frequency of collection/measurement and reporting are accordingly specified as 'reportingSchedule' and 'measurementSchedule' attributes of the _[dataCollection]_ resource. # 9 Short Names ## 9.1 Introduction + Short names are introduced in clause 8.2.1 of oneM2M TS-0004 <a href="#_ref_4">[4]</a>. The short names in oneM2M TS-0004 shall apply in addition to the short names defined in the present document. @@ -2018,11 +1827,13 @@ In protocol bindings, resource attribute names shall be translated into short na **Table 9.2-1: Common and Field Device Configuration specific oneM2M Attribute Short Names**<a name="table_9.2-1"></a> -|**Attribute Name** |**Occurs in** |**Short Name** |**Notes** | +<mark>Editors note: some shortname are italcs, some are not</mark> + +|Attribute Name |Occurs in |Short Name |Notes | |-|-|-|-| |_resourceType_ |All |**_ty_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_resourceID_ |All |**_ri_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | -|_resource_ _Name_ |All |**_rn_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | +|_resourceName_ |All |**_rn_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_parentID_ |All |**_pi_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_expirationTime_ |All |**_et_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_creationTime_ |All |**_ct_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | @@ -2039,7 +1850,7 @@ In protocol bindings, resource attribute names shall be translated into short na |_pointOfAccess_ |registration |**_poa_** | | |_appID_ |registration |**_apid_** | | |_externalID_ |registration |**_eid_** | | -|_T_ _rigger_ _-_ _Recipient_ _-_ _ID_ |registration |**_tri_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | +|_Trigger-Recipient-ID_ |registration |**_tri_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_containerPath_ |dataCollection |**_cntp_** | | |_reportingSchedule_ |dataCollection |**_rpsc_** | | |_measurementSchedule_ |dataCollection |**_mesc_** | | @@ -2096,15 +1907,13 @@ In protocol bindings, resource attribute names shall be translated into short na |_coverageEnhancementLevel_ |mobileNetwork |**_coel_** | | - - ## 9.3 Field Device Configuration specific oneM2M Resource types -In protocol bindings, resource type names of the <mgmtObj> specializations shall be translated into the short names of table 9.3-1. +In protocol bindings, resource type names of the <mgmtObj> specializations shall be translated into the short names of table 9.3-1. **Table 9.3-1: Field Device Configuration specific Resource Type Short Names**<a name="table_9.3-1"></a> -|**ResourceType** **Name** |**Short Name** | +|ResourceType Name |Short Name | |-|-| |_registration_ |**_reg_** | |_registrationAnnc_ |**_regA_** | @@ -2116,53 +1925,44 @@ In protocol bindings, resource type names of the <mgmtObj> specializations sh |_myCertFileCred_ |**_nycfc_** | |_trustAnchorCred_ |**_tac_** | |_wifiClient_ |**_wfct_** | -|_OAuth2Authentication_ |**_o_** **_aan_** | +|_OAuth2Authentication_ |**_oaan_** | |_credentials_ |**_crds_** | |_SIM_ |**_sim_** | |_mobileNetwork_ |**_mnwk_** | - - ## 9.4 oneM2M Complex data type members + In protocol bindings, complex data types member names shall be translated into the short names of table 9.4-1. **Table 9.4-1: oneM2M Complex data type member short names**<a name="table_9.4-1"></a> -|**Member Name** |**Occurs in** |**Short Name** |**Notes** | +|Member Name |Occurs in |Short Name |Notes | |-|-|-|-| |_encryptionType_ |dcfg:wifiCredentials |**_enct_** | | -|_u_ _sername_ |dcfg:wifiCredentials |**_unm_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | +|_username_ |dcfg:wifiCredentials |**_unm_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_password_ |dcfg:wifiCredentials |**_pwd_** |Defined in oneM2M TS-0004 <a href="#_ref_4">[4]</a>. | |_wepKey_ |dcfg:wifiCredentials |**_wepk_** | | |_wpaPsk_ |dcfg:wifiCredentials |**_wpap_** | | - - # History -This clause shall be the last one in the document and list the main phases (all additional information will be removed at the publication stage). - - +This clause shall be the last one in the document and list the main phases (all additional information will be removed at the publication stage). - - -<mark>Table with colspans converted to grid table. Please check and adjust manually if necessary.</mark> - -+-------------------------------+---------------+---------------------------------------------------------------------------------+ -| **Publication** **history** | -+:==============================+:==============+:================================================================================+ -| V2.3.1 | 2018-Mar-12 | Release 2A - Publication | -+-------------------------------+---------------+---------------------------------------------------------------------------------+ -| V5.0.0 | 2024-Mar-19 | Following R5 CRs are incorporated from CR pack agreed in TP 64:\ | -| | | SDS-2021-0185R02-Adding\_[credentials]\_specialization\_to\_TS-0022\ | -| | | SDS-2023-0216R04-TS-0022\_-\_Adding\_SIM\_and\_mobileNetwork\_MgmtObjs\ | -| | | Note: this baseline is created from V 4.6.0 | -+-------------------------------+---------------+---------------------------------------------------------------------------------+ -| V5.1.0 | 2024-Dec-24 | ETSI editHelp V4.5.1 merged as per open action A-SDS-64-01.\ | -| | | Following CRs from SDS #66 are incorporated:\ | -| | | SDS-2024-0104-AuthenticationProfile\_M2MSubID\_dataTypeCorrection\_mirrorCR\_R5 | -+-------------------------------+---------------+---------------------------------------------------------------------------------+ ++-------------------------------+---------------+-------------------------------------------------------------------------------------------------------------+ +| Publication history | ++:==============================+:==============+:============================================================================================================+ +| V2.3.1 | 2018-Mar-12 | Release 2A - Publication | ++-------------------------------+---------------+-------------------------------------------------------------------------------------------------------------+ +| V5.0.0 | 2024-Mar-19 | Following R5 CRs are incorporated from CR pack agreed in TP 64:\ | +| | | SDS-2021-0185R02-Adding\_[credentials]\_specialization\_to\_TS-0022\ | +| | | SDS-2023-0216R04-TS-0022\_-\_Adding\_SIM\_and\_mobileNetwork\_MgmtObjs\ | +| | | Note: this baseline is created from V 4.6.0 | ++-------------------------------+---------------+-------------------------------------------------------------------------------------------------------------+ +| V5.1.0 | 2024-Dec-24 | ETSI editHelp V4.5.1 merged as per open action A-SDS-64-01.\ | +| | | Following CRs from SDS #66 are incorporated:\ | +| | | SDS-2024-0104-AuthenticationProfile\_M2MSubID\_dataTypeCorrection\_mirrorCR\_R5 | ++-------------------------------+---------------+-------------------------------------------------------------------------------------------------------------+ diff --git a/media/image2.png b/media/6_1_1.png similarity index 100% rename from media/image2.png rename to media/6_1_1.png diff --git a/media/image3.png b/media/8_1_2_1.png similarity index 100% rename from media/image3.png rename to media/8_1_2_1.png diff --git a/media/image3.svg b/media/8_1_2_1.svg similarity index 100% rename from media/image3.svg rename to media/8_1_2_1.svg diff --git a/media/image4.png b/media/8_1_3_2_1.png similarity index 100% rename from media/image4.png rename to media/8_1_3_2_1.png diff --git a/media/image4.svg b/media/8_1_3_2_1.svg similarity index 100% rename from media/image4.svg rename to media/8_1_3_2_1.svg diff --git a/media/image5.png b/media/8_1_3_3_1.png similarity index 100% rename from media/image5.png rename to media/8_1_3_3_1.png diff --git a/media/image5.svg b/media/8_1_3_3_1.svg similarity index 100% rename from media/image5.svg rename to media/8_1_3_3_1.svg diff --git a/media/image6.png b/media/8_1_3_4_1.png similarity index 100% rename from media/image6.png rename to media/8_1_3_4_1.png diff --git a/media/image6.svg b/media/8_1_3_4_1.svg similarity index 100% rename from media/image6.svg rename to media/8_1_3_4_1.svg diff --git a/media/image7.png b/media/8_2_1.png similarity index 100% rename from media/image7.png rename to media/8_2_1.png diff --git a/media/image7.svg b/media/8_2_1.svg similarity index 100% rename from media/image7.svg rename to media/8_2_1.svg diff --git a/media/image1.png b/media/image1.png deleted file mode 100644 index 97c1800c30f775e41f7ceeccb99e5678e51651cd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4826 zcmeAS@N?(olHy`uVBq!ia0y~yU~FJuU}WQ9W?*25{;<h|fq~&bfKQ0)<$%z=`wxCN zdhB6W@4A+b-yc4nP}Mr`<o<H`s%;4=r;ROc<rRLpeC6fKSJ&f{@6|NC*|y`yqsLEY z&R)4-@gaHDO+{sUtsU0%PTX%~zSB2odsy@V4ZRK3^}Ag>S5Kd{B{TQk`}aG_t9NeL zylL{ZO<T5|^$s{TamxN}JI<ZI@cO~SZ3~y2Pfp*xeAV)mYmSJ?{Qv)-fkaSIzvCqX z1A{?HkYDhB(f~u!(hC&~3=E7(-tI2?%2yNw85kINl5+zByqt3j49pFU7#J9sJs67j zFfa&~c)B=-RK&fVTUmYEg728Dby<x1<i#)V`Yku!{C(Y%_y6C9Eq4{1@}cQSNC?ya zjh}Oz1BL32I5sRXOaHB_)p&MM`S#iKc@G?FKENQ+(5kxO!&_fwo&$%3B7S^Z#>keC z$f;9PeVKuI!v+?yeS0$-7$YK>xbNRHIl!Q!)7YAyFO|R`HtoQn?dH4&4BXxc4{y(A zqqZ?&JP+RO*nR)bl&kNz+<enlz9{_WyFBx=`Q<f_^zP)B^XEQ3d-%5Q^{UwV{;Lgt zKmH5ozV}x)Pk!(8`|sTLcQ4t#eQ|gGy?4u(mVLiqP*yj4=d;&B|1FEAKlye|yzcvd z{@oKb${(lQeQ-DL#MSn@Ef4zkeYx$OAGtP?yF-GPgQH-=3ywzi2NB+>_3|y{!kZF~ zUuJo+NoI0f_l}pvrx@SJtF>PG_s~Q_iQmEY%==|2RUh77|Jj+<Rs33E<JU$3<{N(e zr@Bkzsw@K-%8wND80Ctj{IES|vQ~f5k!$L8JNYe)4)6c_+4ni84a4lubN-w@e1eOy z{8Pu;z<)vNXJ*cq^LKx+R(zk$S^ig(A0J$3eNySZ4&zB50Toeq_HD@w%Oe-ZZQXlg zow32cZ0#-o5<FNKCVOdrS(ePtkiW00(e9IP`|cFWO&8lIG3;PoddY0Hvz%eW?Qc6J zgP+<QkN)CXoU6{Tf&G!Zcwp*+qYS66akKbbeU`ZWc7S-%jG4~QwLV`g=44=zJ@E43 zj@mn{%U7ElGRzY6^||}-#>tuI&MaGYVfBPM+iMTlYq=yA%(gQYn`11iY_ecc*}dP) zf9oWkRoioJDib}x$a2Ykd*46ye>Jn1E~vbn*LQHnidUCr+fJFA{G#pDUUPvkJIMw{ z7Lf#<84Qid7ufH_B)R9$y5R9`qK1S0>emcEelhN6T=Uv~tKy#@SD1HPUiNF|O640Z z3_ETx6~67OV5r~rG=58-IS=y!#*TPNP7iB^2OlezWfi|~mU$idRw-@@uM=ay%S+m| zuVbcti9hwRVp&`6<Nv~I8!Gn-IoV%rS#pnu)j?O_q}=?MU#70=)z|GhQOu+Mt8L!o zb<E4Z{tI9@azLKx{h25I(el>+0`1=%b!+_iHv4haQvDh16Fd*pKG?dPYwEe9|3cry zSWd|Pus*VMrrZ?<t>pniZT{B+iw{1Xp113%z`6RG+!|hn6&cR?XZfC+xm*1zWN6sG z-b$J=tHIt<_w<5?sY_ECYIZg<WC$!_ZCHJAgU{_F-?Qo!7?hS3ygBYQ`Ci}N7WEHW zj4cN@UNT{rsMg_ejX^_lZ-j6PgBY8@34sv*BVxK|SzKo+SRFsB!4*~N$!6kMA}4U_ z(C^M9sRMshr9Mcd9TI7{<}-tP&Z@ogck-{U-t54;z_TsjgRkLFD~0O~?5gS0v&|J4 zvSOTWUU2w(R9S&t;M=#IUBUli6dD|AoaZvUXJR^OagJr`>avYC0wN5&%^7yHmicsg zF-ScKFTJ+!LwjNa(}JgNS<)|b8Wb2A1TqdAiPhPxUC+wZuqI5~JDzm~(;b2PybKHO z?&(=;Ae_w1TCmJ4W6wg>EsJLAonc~Vu{qhcjv?ZH1i!r@kHQAC+AT-Y{jaCWelwI3 zaENUUT7LU@ss4dkQU(SM7bbnYyy3)i%?%D!?$_Ixqzv{h`o87n+ih3ZS52?|d;fUs z*2cQGpIKxa3aZ_<C;rM5kC+&w8{2cKLEzQPRXqQgDy4J}er`AKm}|!Wwo>p(_|3N# z3=3O7OlD!xpP<Tk@H2P$i7UZREf`X2f5n6bePGIFFA#exm~B&{!q6#L<;!qj@8Yu+ zxye@|7#b&Jd2z>yGTbpMDQ<~iNS|}yHB$lK+f2@$vvqx9ybS6ePBF~sKfv|k)1<wf z>;-nsyFbNCH++t@cvf=t!9$~TU&aErbEz-Oo}^3OPv93dY?!g@dg|+}CgFGUYM<>{ z#{Ho~{D8{m$x%mb{$D<0*Km17-J~UqTUq*YCh9(8t(%my@b(eg|CjalFuk~UI!cXs z#dhJ#ml<QLzkip%P@Q(0gZ0DXQ@{WIe0JF4&(B{!|H{`b{=fHQ-TvRY>*~JGo*)(; zUjOgg)5E(jxIDPre*S&;qx}DWj@R#;D*SN2a^$<*nCltS1Xw?K3;w9xvu?@vr^R3G z->;wV%p3Cm?eDK&x6iw_{q^gQvi5bHLP^uY+QY<t>|%0De&V+v<zU)#1%}X{%gVm} zaqCmqa`^)L0ln>W8hE_Ka<(xsxPJVjy?^?F?1TENgqNn>z2|tc>1-I|0*!s1QycEz zW<2+IV(5&64i8cpHTKm{(q!C!a&~XC@a7hMo`xGd8(Y&P1D2a=L~gk0<rDDsgnhTm zv9-IM{rOFVO;`ez!q3e8A}HN*$aB^7<%~x+AK@=()R<poBJZFkaDGxm#=j4DUnqPr z&2|Wk;l6XAM&Z=_x{14D9<$C`;HA9p0n0Pyi!T(ulx8~wa@;wPqtJEbzmBNj2_?>+ z3o&j}?Ej@kU3Iw4WEOqVX2H?M^K8$UF8)yXvUT<Xrv8>^W($w9FI+F@@R9A?;meH~ zP6AmB1)?+T80{4~Oc{1?`RqQ}qHu*l<opKSSv)SnO##db94*V30xxD2tmd42lfg!O z2A9jv$>PtZ@bG*%n6`R0`xT3QO>P-l0=}G1XIVUroE|!eSX3S~Nhs6h&S^f>m=Pq9 zB^9vP@io)KuaO5lZ!BZ{yn5$@M=1pdJs>iTmjxF(nCNntGMF;l;B47;dpYaER}BAR z*S7ionmF}xc=-Q`Wg4*zJpOIYjTun_tN0X_nq1tm>VQJ`hoY-RC7i5RxTk-)v;T;K zi9JK(t?VV!e+T4pGSuG_YkRq%m2J^S?M=IOHw4FQh&<xX`FFc&v(CNKwXT8(5(Ri& zl&=*3IR;7uTns0a4v6S~e`vjgxj@2Yzq{aW-3LyLQ*>_lFfvG{c*ecE>)yh^ci_H; z!1{T%i~*Yxj9D4}DIIXpXBRxc_`}fY%eICZ(*<AHB9m4v{lnGbeE&dAM&vI;rs_GG zw~Z~f98BYqdQksL_2%i?hrI$e!rFTsOag7Qtw455G3;>^lWeh4?k_*W#PC=`(URk= zpu_jQKlDCMefQKWj+KSsn4#0Asx;07lM|Qr#{8VR)$x6#cWtIYpWvkC3p$KFS?gcM zt<#A#?{Rm0s^Jz8aGs~u;U%9DtA6;j>vOm~7<M$SXsUX~ap3Qa%}vv_z0H&r86O<u z@YLQ^be1*r{L?pXfgg%ef3{s_un-U7KI<9waNXnOy8ixt?$`Za@qmrlU&!zvC*yC4 zbI*cB^AZ~P%`VSi4|!h^$+F_%QwDj4>&#gU&OH-0=_))9X|X<GvPXu&A;qgr!qL_C z;6h%r;7bjs6)tl)ou0JWp{X*WcUAoSsatdv@_Aomuh(+S_}R&<Fr)oy(d%Ru*{>|^ zW;c91nSVJhd-U{2NK3-@Rnp2CEDIygwXB~0CTqP`+`2!<G8;5Fq>@-BKA(}p!<V~Z z<}|jF?ZF?5-dp?>5AxjBxT3Er%~JRs`^>)Szt1oV{CZ#~a5eCJ45LXmL+KuwXwhjZ zN>Ztr%omqLeO*wpAeV7==FA0U+ZI21YFEG&P@%`Lg5fI24812UKR@i_bg8_}W5H=A z`byu2<&uAC55tvJ3mIAXayLk>U~I@;$tL;WX@&I}KPImIO7?|!Hd#w$Wq!D1>!3Z$ z;bhZU2Zn}UVa+|$^G+Hki8jcHZ)AQKt-89xyL7fb!-2-ot>O3f-PwFH{2ud!zlPQd z%s)DMwjA$aWaw|Ju>2+Hbw785qQFLn&}EJ4_1r6-Gya~!ml1s+?Zkl<DJ?ZGUkMh7 zd{Lev$57|UV!I(t{GZp;70-p296n$Wt-<AV<}~yBr+F6lPOP#B;=ZAHZ+^L5=tH%1 zhCPd|KgPY&Wp6mkB+7cWCG4c%ziS6{a^{;dT&w<6+_1~a`aW+$!=K2A*|}`XnBII2 z4Rkpt#lU0qO?368k2(xT7;2Z7uVi4Dtn=;VDhsP@2Cn8cQ45W^8~PiX*u%pZOt>7c zKI&Y<$Pm{fopLp$l8<4xSW?pDn%EDIm>J$Zd^J@zl9@rs_Kfwlmy0AB_HXjsvC46U zL?pAvcE{3P8u<(-o7coCTktXzGCZ7|mBrw&u0>L=^pFWyLQm3%*+IskqPr%znElY1 zNG4x1^L&Pted|_s`7k9+Z#HAoir~p(V7UAtl3{CA8lS@_%QqKxo2ky$WXO@+G_ih% z*i8nHt&V4JE!<<OP&&cX^)x5L{2Q{2m$@$J{(dN2R4jEtOxKuwg2jnhUl%7by#EoK zXxzSJ%j<PNVou65lx4<0W4I&}yE|N)r$PVF84ZW!j1GYbZ4Qg)-DGZHJ8>m?TXu01 zg8{ourB}fAPX<TXN?(^R6lW3sn_#SGd$V)1pj?p147rrIT;Bv3&M^Ad?^(z^A*p%S z+9^Ak8MOQ-GwiaJVPtR+++^r5S-Z%ZL38J%Jbw3Y3_@&?+bgCpF)%N9RQYMgwYrbS z@gg&1<nFRfe#59@u`6$}7$d{nvw_+Nz7*|{bEw(3?f#j$whccPIqdK5VF2m+{bk(} zIfp&Gug+gRCGYS>p*rKPMd6_Yh7b|s-%8aCA9qfwlTZD}u!uc!zxRpD3}yCN^B2vF z7O1_cB0YQk-keWo<Q>-V?vjzWWNTnsU@W&|E$8<AH)`HKP1!HX&>@qumsM)Ef(b)v z->JO}9a|lzJ6{WDP$-(P)wuRN`vS&{z?wN{Rrr5@dECWx_~kln1_AREZF6_^aUObl zzUDvygFv{*juq+Ob}p#maKE`Aas4j_hItGd(o6Xn9(~$+I9)Dm0b`+SV>hc*O@qU~ z&ukebAs#)vMSQm-nHyF(n$`HPy3Ww}=O%xqb^6vLPrT+lUUrQ^VVTAQncLTx8N?dD z1v8X|Z(~+a3pZNvT&u>Rhqvh5l-CRggda5Ju`38p{QWkkGVp-yyKGS@0mBn>^lxot zVEM#uC;O6V!fl1`AxA?QCWy1%xfQ_dpz!~L)0B-uI~bnq6#9PRcqxMbztMM||56Pu z|4z)y5pS>we^ggcB+GEb?8My+DJ^)Gr}2r^{uD=S&|+KR!0{pO35$7?<Q$uC@d z(v4w>S;m*n-l+@%e48fLY@77){5giGc!OPyCgDcE{vG#X;9$S`qPcIsLiUBvdBs=N z#h(BF9j@d3^1a5Yy8ittsSGtaH=gbO7`mwC&V=kW)`kpH3@)yXAHSROG_WyrF8;jF zAeq60!J~`mUiwkq1}+B2rzcOE&f@1d>TBp1u}Svm?&X;cU2G3r8UJhNvpKLc<TU?z zFC)bu%TVBS?yTu7{(#SnCq6p*&T2bz+?Tn;gyF7`yWR6_hA9jUW*s%zHyAV+4|Fko z$-d3zz|9aMB9Z!PwzV{aE<-?ILI{@u!$BseD?U5kacXe&cr&s&h%*F;NK9wqY0zU> zpz)yo{M{M{2FER&kGh%u9e;L~Q~O-Y>U9y)Po^@RVR<=Aq0W0wIF|v#DTW(!nHK)O zY2%PB7x49Pj{8S%#$}ABqz=3l`2aFhnjyLQPf!CR2h)z*3i}@{eg1o=H}mEVtES6` zum1m6TZiX={Kci65&74=bQqZx#Ad!@WpfCh_vju^Lqy6haS4Xl%C2f-hNOuv;}RH3 vo@%~3%h2Jvth$l$!qnwE%!h%7?f;oSyno-cF3RRJXiUh{)z4*}Q$iB}_MM!p diff --git a/media/image3.emf b/media/image3.emf deleted file mode 100644 index eff059ab25d657a9956ae9b5eb8058b7ecd48c8d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 49564 zcmZQ%U|`5$KmY?K1_mdPAXG@wmw};2pMgQa)z^)IfstX(K?a5*Rt5$Zs632vU}Iot zVP;@3VPasgL(&hDzcYt}!R7`FgBt?_gAM}&g8~BsgR8HbHlqV0gA4-$g8%~q1Czjk z+aPTT3=9k)3{qRbz`&3KRcqkD1Xc&Jx4~ZCfrWtwWH<u@gPa2^oGt6Xz#ziFz`y}A zlYxODoRNWn%YmUmg@J)Vf`NhI>g?$MAbZMEXF6_bzT+S-(BUL6z~Q6_)sw`)05%Jx z2BZgs85kODp;j><vzZte7}TNWg4Bc5M9;noq8L<>%z?2v7#JGD7#J7~7#J9Y85kJY z7#J8L7#J8d85kH?85kIh8S@#88T*+^SV0)X&WD@B&cM(BGY8}dkh?&bfuX?>Y$2FH zut9DEh2aVY28KD%FywGxU~*t!U@!rNjlhB1AT8%W1Oo%Z>Q!3yAU((!Bn65W5dHuE z|Nk5gjLaSk3=B3<{UA4k<UnCLeSxx5UFJF`7!3+rkT{G6i8C-VGBz?ZGmAPfBE=;G z1IQmBj2yPeY>=Dc85kHWK=wjuki8&2hz6xgZU}?n|Ns9`7KDO@8ORJ6n-wV@1fgLc z$-uy%4P~Rp0f-ONOHMp!K+^)q4WKyLz`($;1Rf`h%o7+G7+OGn6F6|27vgM&+lNA& zR<Gi6pf%0Fi~!ASEbJl<j18dt2+C)myaIABC_je4-Ah>-LXUfp`7;<87<!P*_hDdQ z0Hsq{+B*l$TsYGxB+MKc7#bX4dQMIX1E*J5c>@v$g+E9sC`>`=5kz+$obSxQh?yo~ zaR#y)lr}*aIZYz7LFU5JCrCXkUBYMvAxL@$*&R0NB#44zSh@n~gOw#9^FRt<YGG<X z;-GQ^RPKS;*3dFb8d`?NFf%apGchojA@Tn+LCP3Vo(Gu;!l1ki!l3dehMAc;f|;E; zgqfY$pP8N6hnbn#hxtDf%nTo>nV@nCml;0H-Aw+>?Mxxe?MxBO?MyMu-Apme{Y;=j z6I2c(yU(8))qVS!3Ayhua|H8o<`CxN%>K;BnSGcKGy5>_XGV4($V~k1^JeyEc4rP@ zc4v-Yc4v-Z_GXS@_GiZCK7JNd_tmoya$hq`1amt}2y;7&KXW^a4|6k%4|6>Wvim@0 z;&&f6i$60vO9(SNO9V4JOAIqNOAIqV3pV$iM{}P&D<StevqmtxvxYFcv-&f;v-&VQ zv-&XGvm(0>WF~(1oo4Z8KF$)te4HhM`8Z1q^J$hC=JQzH*UyR?e*X!&kC`oknVl_! znVrp_nVrptnVHRp`9F&LKxX21UpK2ib31DYb31DUb31Dcb2n=Yb3ZG#@bhOwb>DtA zLg9CqErR(tTL|-UHh<>hY(C6~*?gGyvmu8c$V~k1^JepBc4rG=c4v!Vc4v!W_GXJ= z_GiQ9K7Mvo_tmo#a$hrh1amuk2y;8TKXW^~4|6lS4|6>`vim@0;&&f6yFW8Kdk8Z- zdjvB(dkix-dkix_J2v;7M{}P&2O;-4b3`z^bA&LvbNDm6bNDbjbNDdZb0E79WF~(1 zoo4rEKF%J(e4IUk`8azF^J(@N=JQzH*Uy0(e*X!&kC`)qnVmC)nVr+0nVr*znVHjv z`9F&LKxX21UpI$8b2~=}b2~=_b2~>2b2mo}b3X^R@bl+Hb>DtYLg9CqGlKazX9)9g zPJia(oIcElIenP-b0UWy$V~k1^XBwtcIOOXcIS*>cIS*?_U4RX_UFXrK7KA#_tkR| za$hr71amuA2y;7^KXW^m4|6k@4|6>ivim@0;&&f6mp?N*R|qpZR|GRVR}3>ZR}3>h z7dH2uM{}P&HzD^qb4M_{bB8dybNe&9bNetmbNevcb0fPCWF~(1o#ygqKF$@we4HzS z`8Zb$^J%Ua=JQzH*Uya_e*X!&kC`WenVlzunVrX<nVrXnnVH9j`9F&LKxX21UpKcu zb31nkb31ngb31nob2oPkb3Zq>@bl+Eb>Ds-Lg9CqCxZDnPYCmI9)ITJJU+~ad3>1n z^B{*G$V~k1^XBnqcIOFUcISy;cISy<_U4IU_UFOoK7L+Q_to<fa$hrV1amuY2y;8H zKXW^;4|6lG4|6>)vim@0;&&f6uRk+8ZwNCxZv-<tZwxaxZwxa(FE;m`M{}P&A0hWS z^F=Vb^Mx?G^Z7Ho^Z774^Z78_^C7zrWF~(1o#yptKF%A$e4ICe`8aP3^J(4~=JQzH z*UyI<e*X!&kC{J$nVmm`nVsLCnVsK<nVH{*`9F&LKxX21UpJpWb30!Mb30!Ib30!Q zb2ncMb3Y%p@bl+Kb>Dt|Lg9CqKZ5x<e+ct&et+iU{65Tw`F)u8^CO2J$V~k1^XB(w zcIOXacIS^^cIS^__U4aa_UFguK7IjI_tgs!a$mDR1arGU2y?rDKXbc)4|B7C4|BZ$ zvim@0;&&gnfIl<4KnOFtKm;?pKnydtKnyd#05<oXM{}ROAR+fT3q~-z3x+Ve3;Hv= z3;HlS3;HnI3nIG@WF~(1ofhzCJ}wZ#d|V)c`M5v~^J#$?=JQzH*Dr_~e*X!&k69>! znO!J^nO(@AnO(?-nOVq(`9F&LKxX21U$>w?bGu*&bGu*!bGu*+bGKj&bH5<A@bec! zb>Ds=Lg9B<D1!O8PzdvJA%EuMLO#rgg?yOz3n7Oe$V~k1^A_@Fb{7g^b{C3Zb{C3a z_7;j^_7}qDK7L_T_tgs%a$mD>1arG^2y?rzKXbdV4|B7y4|BaRvim@0;&&gnus<`q za0oNIa0D~Ea11lIa11lQFgEv{M|0m#g6{h(9Kp;e62i<V;?K+|;=}w`*oXNiiu*uj z;&<O^VSnc1!XeDZg(H}c3&${@7LH*)4|gAEJPOp$w1<wx88a|2s6oexKx3J(J~OC~ z4eLvT#?WAF(3lRWe-Fa=#?z3;1VG~!p#CsO3^bOBZHy5#eghi+(w8^`9%BTlh4tM* zc7ZVRI07;o)W1g`4?rJV1gU}f0eNf@Bo6A^XCjR)Dl_CWC^PgkwXlIOh&?pM7C~VM z8mno`y#O9t1ks={1&PCGkUTZU7D4F)Hf95(i5Xi2>4U`s^4KD1tOYbinuRpBh#m(Z zK1?qt9m3e4^a)BIAWTY{)L>*_kYR+3uWLC###TY&-V6)}oIvh@-~-^XMNs&0I54rn z(lKa^jA6Bw9Y_txPav9|fq}u9!I8m-!IQy>A&9|~fq}uyfvMpD0|Ubr1_sc0D|kE| zq@E9~HlHDnA&nuEA)TR=p@<=op@bom0VJltz@U<4%V5D|$8cZ74ouH40MiXp%b@f@ zFwG!v4NNz*{sYqv8e;Zf^}(tTI@t<LAJFv#(+w+vA@qzaFwL;P0YWo0fQkf=H$cG& zXA42cV?k~Pg$*cAg2s)-pyD90AO;480!C2mGcbGrNkUBlQF}lcjDdlHoq>hHnIVxO zhar<8iJ^!Al;1$|q+*Ykv7qeA0CEo~yc?L@*e+DNv4Qv?hrfAb$^fzwG$sp@o51V_ zR-ehpz|imsr1u2Vga06!fkA=Qooz=oM4so#x^mUnqAZQ<eWjW?`${{-1U`cN`sJ}H z!-U7C3@&Z^N*NdsVjtEiumrU2E0xf73Hhza>G1abo?_5k&5?(u;PHBxzZP(1fcf>z zAQ4lB@BDj<B?a~tgUVo#$cjg%4B7&Fi|fT181iSY3=dIOd_8B;36K{UKz4xC{RerJ z;e=C48F;D&KF<O2Gia=N0d#B=<mWU71_n^vfaDk$c%4E+d7VIJfXa1Hngfj&gY1Q2 z(AXvjXAnq_ATu}_7#Khpluto+!NfoT3}S<5kT^&U2!rf^<xyS+h6YeQ(80jKPy-#m z)^>o*AA!^nlm9?@2{xw!ax=(}APfpDM+R4hhSG<24Nc4K8m4mDgJ=c{(lpH7AoD?C z461WM<KyDcIUUeE6i5yh#vnORJqmIQt}qT@U|;~blMCcw1_pRM!omhLjt?qdKy@T? z*kG$Ktv;1HgUTcY=$ss=>;qxsdJ&loau>``$ZX`g@EdfV&598*&z8WS&yc|1&$K`o zghA|~Q5S;32UORo{+;6tqe0;X5{J<sacb0spsWq617S3%G$b_72GR$M6Xd$^3v_PH zh7mE(h8_nXK1?qqbs@+NpnOTpJe%V0Zf8(ig4Xm%oM!`tDJVUHXhQRBp!^HU>mZDr z$C23}HL!U$5F3^*VKg!GY#@EGb~PxSfQl{jc{Y$ZsBQt(l_2%#^K2c0sPk+fKB0NG z4nbz-7D0CA20?b_YC(493PEP(3PHp?TLsiiP?-!WFG21CVNjg_!k~JnLa>{uTCkm| zL9m^vMX;TzL$I5vLlASG4dfosoEWSR2;vi(XX_9=%-kY)oVh{pICHh&apnra!^{<e zh<P@U`#@&mcb_+NwV*q5gP=Qei=aDmhoCoehal!W8^}GNIWc7S5t?V~5Nu{?5o~8^ z5Nv0u7Hns!5Nu|t5Jb$gf!qf&6TkboS*iuuSsDb{Sy}|ySvmx{SvmwU=h;B+1I>vc zyN}R3TZf=CYm1;eYlEOWYqg*|YlWaQYlR?Uo(<$akeT@1cbcVI@Hk6@;Bl4~!Q(6) zf~Q$J1Tp8?K<)$0i6Og>&^%j*ATwKwAUj)wAUj*NAUj)yATwKqAYz^k<UWv@_}$md zS}oYl+924@+9KG_+9BA@+98NJ&jxZIXif~-eT3%OIs^~1wFn+(YY;rnRxNm(twQiH zTZJHEo(<$akeT@1=gn3v=+4$4=+4$6=+4$5=*`w4h&j&&avx|;4B3741m@W~1e@7g z1l!pg1l!rG1>4yx1e@6_1QGLWAoqdH#P2?C_G&?P_69+A_7*{Q_6|XA_6|YJc{Y&y zKyzZq?jtnM)*<N3(IV*1(IDu~Q7!1sQ6cEeQ6Y$!X9KwpWF~(1oo25VJkH)Ac$~dO z@Hl&i;A!>_LCkqJko!P$V#w|zG|$!{$jsRy$j;dy$j(_U$j(_I$jn(Gh?r*sxesI} ze)n~AR13CqGzhkHv<S9ybO?5HbO>V3vw_?PniE5IAE9}+4#C5mErQ268w8JYRtp~I ztPniRSs{p+X9KwpWF~(1d2?0^x^p%Nx^uP&x^s32dUJLNV$QRH+y|NyLv|mbdA1J0 zX08^&cCH4&cCKo{cCHG+X08fB#5^0weIPUOyN{czT9BQqL6DuRMUb7VLy()RLlASG z4dg!1oEWnE2+gx~2s(4O2)c7O2)c7u3%YYx2s(3D2qNa$K<)#XiQj#vxvB+^b2SJa z=V}o=&eb7!nyW()bDj<4KG2*Pvik_lvvmkE^Rx)E^E3#u^HdA6^Hc~j^Hc~T=Gj2* z1DT26ecjyEg6-T5g6-Tbg6-TLg5BI5f|&DcAoqdh#E{)bXr8S@@Gwt{;BlS?!Q(vD zg2#C(1P}962qNa$K<)#XiQj$RJk^5kJPm^GJS~FmJRO4GJRO3V^K2mZf#$@J-A8Di ztwXSxw?(j>w?VL-w_32Bw?eR)w?Ysx&jxZI$V~k1<L0dvWan)VWan)WWasS=<mT-V z#GGdXxeqiahU`8<^K2c0&U`I`?tBe`?tImP?tB%3&U_Vuh<P@U`#@&mci(B=YQf{Y z4T8scTLh2ub_ky4?GVJAX9KwpG$)4aK0@<s9fHjKErRU)4T9|a)q?E&6@twC6@rL) zHjw*3X5x2WH(#}2J70rfJ70@nJ70%jH(!S!<~$q7eV{opWcLx8XX_9=%-<q-oWDWv zIDfU^asCRy!~7M3h<P@U`#@&mcb_+ZwV*qHgP=Qqi=aDyhoCoqhal!W8_0d2IWc7S z5t?V~5NsA`5o{M|5NsEy7Hk)&5NsBx5Jb$gf!qf&6Tkbo1*!$v1sVj|1zH5z1v&(| z1v&&V=h;B+1I>vcyN}R3TZf>tV2hx;V1uB$V6~vTV1=NwV1*!Jo(<$akeT@1cUquY z@VG#O;BkQ#!Q%oQf~N&K1Tp8?K<)$0i6Og>&^%j*AhS@5AiGe5AiGetAiGe7AhS?~ zAYz^k<UWv@_}$knSS{Et*dW+0*do|2*df?0*dd5H&jxZIXif~-eT3%OIs^|3wFn*; zY7jgwR4sU1s6z0tP=z33o(<$akeT@1=Pgt%=q}VC=q}VE=q}VD=q=PCh&j&&avx|; z4B35z=Gi&~n}u5h+l3nh+l8wI+l4Cxn}sU`5%X*y_kqmB?>=tfYC(4420?b=7D0C5 z4nc0=4nfR$Hjw*3b7IKuBQ(#}A^2CgMUYXXL6A|TT98qsLh!F}g&<;{4dgzMnfTpz zTDV&9xNw8uap4xh<H8++r-eHNanG}fF+%3qq!=N424H<=&=?|Y90xRh4P%4GbU^)k z5GH0$1Jw5hjpKm&!=Sk{&=?}NaYM5YDd2HK1GITIP(L1I7YHMdBOtRucA$?3pwF{` z%z^m<d2I0sbZpTZX>8G-FQ37mub*jy2nd7NLt|_a6o#O&8uhxR;ITyz4H{DfiNk1+ zJT=A^L17LXvw_jXj4gun!QugVZ1FL4Y|$5KY!N*UKzx{9P&$OMLFp5eK0uh1G<k!8 zf#D2v%pc!4KRo;#m>NK9{y}TqLE|}~JOaX?@l+3ne1>B1JXsz?I)eg(Gea<gD+9xn zf3^(sGwc|?X4!%0hN#70nj!Tlm~Qy>2uw44_ztEU?h4t1)Hz6~gXxC724I>Y*d0tC zsEr2GxMmO-7>Jn{gM}N&?VvdX(B6fQ3=9mQc^G>}$le~19Bd8&Bqz(jzyR_mt~mtI z9v>WGzyO+80L{CA#=k%qHWve$n*p&wGzf#n%3y9IXYS!q^c&|jIXfH_1Uj4^hzdG^ z(gO%1mleot<g|#Ze7L~~+1De>gc$Sgk&R{OkzL4iMiGQT>{$4m2|4K!R6f#Uj}It( z%9S;ozUs5Pz-Ul-fy7}nNPIAs57!wX`_<%`Ap6fibA9M>0OG^a4>|Dws-Ixv#h^HO z!@$7sfQa$|7JeA>@O_U#%Wpu*8jL~HrP$`-LHmX((B|Pm`5}ZMk)enoogtN>gdr8Q zi*B>D9YdhJ9fN8xm~Ob#0;U;O%z)7On<4bx^AP&<BM2?|A3{?w?+6PUP`Q9Sul^Nn zUVQ>c0oCT!O&RpTAqOsdz$RBPGB9vFVPsr#-;^QXi7A843sVNyh|T4Jr7vaw{r~^} zuKxP+tJ>?!q1qT27%~_V;uKgwW!sDG(QG;lUJPZ7sSFGZ(7EjG(QFzq3M?SQBjOZT z?mRGMSo~mJIY<u!1J@ytIUsSBho%fo{yR%S=7Gd!2J9@gnGv?xL7wXnNNoe-;Zl$| z2!r-seRyEX0Mb9_l_^6((e6@#FE@^X+y~O<CbPd3qz5#Q4w_eIVBiAJsmDAtW$?Aw zUkWjckpb7dI%uByIU_hs7<iZ%7(jEsAos({Yml5MbnYEjc^$*Rz<{2<KzRy;L1i+C z24NT*<S$s>f|bq4`2%@g7++lq%PXKc^EC_%44^dv$aN_w|G6<_GNdx(Fr+XjFt{+J zGL$i7G9)vkGBDVzvTb-X*^VKV(+*5GDnn@57zk}y2B8^dg6W1kOQG}$2(9%LLf`oZ zrX9Yr+Jnq-_#+6Wan-8i)TvV#7#JQhLgGf4iGe|x0n|DIg(76_14s_EUlrtETyX@d zQ*ng_C~iRY7mNngs~|q8i~)&(Fo+MLLAIjD-5v%82GHCps6CDxcN`Ab_cA_<{R^IB zr8PYg=U72u3Tl^wXhL(WpmqwVO#{NnZ5d=XDBfXntRVHU_Bo6uW{wr457wswnFmTk z=yR+faaey5#73WE-6D@V#|q*Tnq%D}&&<40o}GD(JUjCWd3NR{^32Rj<PmeMOQ2@r z>jN*5?`B#d-_Eo~zMW~Kd^^(?`EI5y@|bh1AoqagLt%Y%5TDQ->lXRL%p2v8Gp~_9 z&b&hYIP((u!^}(M5p%2{_kqmB?>=wl74q)PYvkRTH_E#+Z;|(A-Xf1V#|m-}Xg(C# zeT3#%x5ziMY?N<jStH-hvO>O{Wr=(<%My9S94p9uAT#m1kDFzMJUh!8d3KhK^6V^I z<hfb4$Yaj2g4_q14@Gt#p*hwq^3JRq<=t7=$h)(ykauTYBJa$)L>@863UVLFO#JRU z&9XxNILjLO<18EHkF#u%Kh3g59&?Tr<UY`RD6;zq&9QEgXJ*?d&(5|+o}F!lJUiPG zd1kgH@`yQBko!Pp;&)#+>k9dH);03&tQ+OqS+~e{vu=^coMQ#K4>TW&>^?$stXt#{ zvu%_=&bCJWINJ*O<7`Xh53?<iN6fK;+y^ofzx%w|R>-@vt&w+U+bHkOwng5XZHqkS z94p9up!rZ__Ys<7-6G%2zEQrNeT{rO`wIDX_9gPo>`UYkbF3iufy~73K5q6E^6czu z<k{Ib%Coa?k>_ULB9A%83UVK4J`~w~gyvYc$UAdvly~P?Bk#_!Lf)NYiM%t%5_!ZN zE69ByGx59cH2Vtq<LqnXkF#%-KhC~I{xtg*dCWOhko!RMp~&tdG{?F{o|$u_JUiza zd3Mef^6Z>T<e52_$Rp-hLGA;YiQj$Q94qA8Io8Oxb8M7v=h!0O&9OxubB-0{KG1w9 zvik_lv2Kw+%(+qiIOiJq<D4txk8>`OKg_vA9x=xXav#V{{O<GSTp{nyxklcdbECXF z=N5Ty&MoqobF3iuf#ySz-A8DSb&Gs6*GBnvt~K)QTr1?;xt7Q`b1jia%&~&p2Qm}C z`?$GQ$g^{;k!R=HD9_HdMV^~$i#+BWE69DI`A}r{5t?J&BJa$-QQn<<jl4Ve3VC<# zCGyVPOXLxAtRVM+%*5}$(_Aa$k8`b&KhCvL{y5hb`O{om<T2-1LGA<1ha$U=&>ZU) zd1juC^6Wfo<k@*v$g}e-k!R*vB9EA31-TDoCVuyIbFYwZ=UyY<&b?8-oqLOXH}@8K z%sEz&`#|%d$nGOF$GS!SFwaK$<2-BRkMpdMKhCp6{xHuHdBhwm$bBF)@w?BPXN9~w z&l-7mo{jSEJX_?wdA7)7&ar~r2bvE>b|0ZR)-CeQyc^})dDqCd^RAF@=UpP-%)3M$ zF~<sWAIMDn?&IcNA<xdcMxLE_qdYtB7I|*oE%KOitRVM+=0lO)M`(_9i@Y=6MtOI> zHS+F!E9BkzmdHEvEs;mev4Y$OG84c1PV=siKhC>G{y6VO`QyA><WKW%k;j~41-TD2 zAByZgLUXKJ<eB+5%CqyYk!R;$A<xdgM4p*{i9BMC734mUnfTq;&9_3noo|hNJKsk6 zcD^n0-F#c*G3Qu8?gPz-BD;^!9P1YO!~7fNkMpmQKhD2G{y6^<`NRB6<PmeMAoqdH z#P2?D{uT1>{A=Xh`8UeD^KX&&=HDWZImZfeA80-l*?olOShvVG3v85c7g!_TF0ewr zU0{iPv%nI0#2hQgef$LWLoSi$7FZ$AF0e+PU0|a;yTBHCZh<ZGm~*Tk_krd^k=;jV zj&+N?v*1Q~cfmFC?t&}i-36D(I}0w6N6fK;+y^offB2miSRsF0V2%87fsOLV1-8ha z7T6+>ImZfeA80-l*?olOShvVC3vHBV7g{6FF0?|PU1*6sv(OTG#2hQgeIPUOyRTbt zg?zi<8u@m?jq>e+TjaY1x5#78v4Y$Onh!;GAE7zcE%JwjHp(9tS|fj4XodW7p(XN% zg_g)8=2$`Q1DT26ecnPV<lTkV$h!+|ly?`}BJVA<MILjG734n9d?>Q}2+gr>k#82> zDBmu;M!sEmg?zj468UD~CGv<lR*?HZX5x1rx9|#icHuSh?7|!6*@d^ra|>^g$DCsY zxeqiSitIi@bF5qB{|axEXB1f@&nU7&o>63p{9oZE@`yQBko!Pp;&<O^;T7`7h1bX* z7v3m;TzHH8Y2hvMxaU}ZK<8Nh(rAtq)K>?MR}-3JeQ@hB);U&C-yJlb0K&-Q2*_-Z z8ual1^f^|L8rV1!@*L}NM#wp7dQ6D@8#OZd3^g+SOm~$)7{neLbF82+1dY{{6>z)2 zXwcj$NE}9k#Hlfd0*Y7Im<@~ujUs~P;XvatXhZMtIVg}mSUe!lu^xlYWf>sNWueCb zh!4|C$s7vE4WKj$+7JiYHv$@G#5XPs3qOoG6e9OBg63pF=Z_(eC4=T29T|cd{1_A% z@)?R46c`*CTp0Wq7#Q9|W@TT;foEMAPEQBZ4Gb5+G=ukJFx@bf13cU6a6lYPH>4_p zX$J>uFnvHZ3`|opZj5VQWgzw|zQD6zkppSJA}H;F=0QMn7$7!iuc8ivA44@`Dg$W0 zBBKNY18Bb@o_UqSAbkYpRStv9hs=e5b^$`pn1s%&9Hzy*N(Tc2!(~RuJh%!I<~%q^ z4m1xAN>{kX>_O-3VM}u$J)k)~P~HX2slevLL2Qs52!p}|miJ(DEU<J9%0H;%^yHu6 zXSXB==ec@j1=&uFVRcSrs-4at8dQ#<pZ5o<CqNjven4h}>H)mt&kT&<wFDsl<}3kk zRR%G^80LRa`2k~t%CK+-$UbOG1_lO@4iQGso<#=mp4xTHznE18e=)<<Q={Ah&EJ61 z11Q`nIdc;h*08!6v_Bi<H;`xVYqU7)s&vA`8pL0joaHo_!W>jSu`@C-fWjRV=Abei z<o-4RFBVXkw+XDGYPiF~2^8+g>%^Sa6@&MvH;CGS)8~yWQ^%`cE1f~^1I?j<(i|vF zf-rJgL}r83ptoU)*Fm<_!_p2&4UCQ4h5^k(gEpUo<~Tt6P(kx*Kbd|p|74meyp9=! zL2Sy>ASi69wGIT9?qK_pLFo?UW>C5V<?%H~=Qx9CP#%YcDTs!NgJ@7Xr1Y#;P+Ebt zU0^hF8;02Y4?A;L51Ri$3oERl?HT0ohs6gh4yjQV5K5D<vhqNdsiW=uev;N5;Yx2p zj0_B*^d`s1zyK<TKye4kZ>oaj9Jj%k@-mNJ>FvygK4*ngc4rU`N^h|60?{yW5Iq>v zn;;{kzL95SVCaOdQA7!Ua9osgP&2(D*ZH8j2h`R8?ZF4-VNm`h=PX@Vc>p>O0CXM% z$ShFW1DOYl2T*wciwE>NpVV>|R{w+SfaQA_jXeL1EB}M^!OCh-83J-AOf4*|LE`x4 zpH&4J80t9?XEALRfbjA4?KcY4bF3Ap=2$CG&aqaYh-0HbKF3ypeE3<CAT#p`oJXl8 zn9rdrSj3?#Sk9p<Sk0j&SkIv<SdVd*WGd7>u<?tp{Dj^2k-whfEq^t~TmEv6xBNvM zANlh+zVaj72Qrh8`?3V`IdTPxIC2HbIdTQ6IkE)mIZ_2M-M19#9+>+~p?rMdXUJdA zq03**q03*+q03*yVaT7)VT$BFkeP(sw~9ZXV=aFX$6Ee!j<x*N9IN>2IhOKcy6-6; zB)nkmD~0m$xv!9~o+Fp9nj@F5oFkX7h@+4%pQDry5q=;u3AyhTUp~iMz9NpdeB~T( z`Kmcy@zrxY<->HJD%3qN_ig2cxEG)MHuBbUtmUodSj$_^v6i=pV<T@q$5vj1`#@$A za-SAoK8G$}5r-~cIfpJ^HHQ{oJ%=h5_oYJJ19RV39>VVX$WzbpmZzHIEl)YeTb?40 zk39JtUwIJj1DQ$4eObKu9J#zj9J##Z9J##J99g{e9I3pR;kOj(9+>+~p?rMdXUJ2} zq03Xvq03Xwq03XmVaSuuVT$BFkeP(sw~8m9V=Ye+$6B6pj<r119IJThIhOKZy6-7B zB)nkmD~0m$xv!ABo+FpLnj@FHoFkXJh@+4@pQDr;5q=;u3AyhTcRt5k?jnx2+~pi^ zxvM!|ao2M^<;HZMD%3qN_ig2ZxEG)MHgeT-tmUfaSj$z;v6icdV<T5S$5t+c`#@$A za-SA=K8G%M5r-~!IfpKHHHQ{=J%=h5_oYJJ19RV3PQvc{$XU<vmb04UEoV8$Th1bm zkDU1&UpW!(1DQ$4eOX-j9JyRY9JyTO9JyT899dlT9I0HG;kOj(9+>+~p?rMdXUJL4 zq03p#q03p$q03psVaS=!VT$BFkeP(sw~8~LV=ZS9$6C&Ej<uZC9IH6%IhJx_y6-6m zB)nkmD~0m$xv!9;o+Fo|nj@E^oFkW`h@+4rpQDrm5q=;u3AyhTM?S|}jv|h?9OWEu zIjT8cany4><-l~GD%3qN_ibf|xEG)MHnP`qtYxp}Sj%3{v6j7vV<US$$5wWP`#@$A za-SAQK8G$x5r-~EIfpJsHHQ{QJ%=h5_oYJJ19RV3Hp1@v$X3tsmaUrOEn7LqTec#O zk8JrIU)d1u1DQ$4eOc`J9J%a89J%b}9J%b(99iu39I5P>;kOj(9+>+~p?rMdXUJC1 zq03gyq03gzq03gpVaS%xVT$BFkeP(sw~8&FV=Y?|$6B^>j<syn9IM#sIhL|vy6-6~ zB)nkmD~0m$xv!A5o+FpFnj@FBoFkXDh@+4-pQDr&5q=;u3AyhTYd*(Y)*_C#tmPbU zS*tl-vDR}uWyN%#D%3qN_ibf?xEG)MHnP-ntYxX@Sj$q*v6iKXV<SsG$5s}E`#@$A za-SA!K8G%A5r-~oIfpK5HHQ{!J%=h5_oYJJ19RV3X2S0K$Xw6ymbseaEps`?TjnB; zkIeZTUzri^1DQ$4eOWB|9Jwq-9Jwsz9Jwsj99b;&9H}gb@Iya~6V%skWnf?sWn^IJ zg5G-r8gl`yIfu2yL3^-ZY*3#YG!6s8r0mC{$Cz8ms!pfQ3?}f{2dJ+D;%`gjaR&80 z(fd3g_k%F<7!ooY)JMVF&mm%*6J!P~++gFJpuQGpyseRefx(@DfuWCqfdSOl@nccv zSjSw>;m2~ED*a86-Jmf5V#YU4#nn24#y2{SCOLuJ2a11?n?T_M!pPx*%m&$k-j72c za|4+J3j^daH_#Z!U(nr9j0_Cs(6Js>!E5}gf{DVn!5GB8#t+jAN_Q|eC_RGQ1;Y5! zAjtpp7;^)SeTZ?)29JS&!V=WyhS4x_5DiL)l#aQ9!W`DuhS9`~xq<Y-!Vi=dVPkHf zF_1qD3=E(#5DRELpoBj-E)s=dddZ0gSegR40Td^oxx5DG-Yd`;2x$BRlukk87ND^J zV(+}dH|_x%?<nc7afZbODC`GI830PRpfcb$0|NtS+#Pfy7AS1iF`wiI=K<(Br_=~* zdX&4>YAw!>G#cSy?V;V`JU60Z(3QKOxsLD9Fb8c41C>p!0%`)FFmDrRqo}MwPvZkI z&Ic-EK<Peb!7Qv{4|5~P-=H)I!pP-0G8>d0Vf7zKJ*=#O(Zr1Nf%L)Z2atK7yp2B2 z2NEYV&X<XFra5Sw55&jY&J)NKUMr9)yjCDlc&$LJ@J4}1;jIFZ@H5Rp<9v|>&PCS} zj1<-tj1|@uOcK@=OcT};%oJ7?%!Hq54!bi8G$sdf54@en&%lsD!0eCw8NzS*Q-$C1 zCkVggj}iXJA0hmeKLYMPkeP(smn9G>oGTC`oGXwhoGXwjoF$McoGO6nKG2vP$UQLk zfyVhje0<?&$e$ss%by~w%by^u%O5Rl$R8nWisU|!nGpp1xQahQcrAa7@LK)^;kEoJ z!mIc*gqQMXV1yrNOfDTMenI1WAU;0#74oGE=kg^B=kmo1=ki4f7xIM*m-2<f!w+O; zI05&);tLmk%NH&DmM>oTEnkZ8E53B$r+n!c?gNd<f!qTNKhQW|8UeF6@}>!|<xLh| z%Nr-WmN!axBX5}SR^BkU`#@$Aa-SAoxUeo?l&~&eys$1`val9ky09u1_kqUbK<<IL z4>Zn~O2B;|c~XVn@+1kr<%t!3%M&U5ktbC6D^DogeIPT#2$+$@8z!8~8!4R28z-F0 zn<SjYn<kvfn}!j7pfNd+dtmMZjq`!{_~O@)CskONCsA0JCstUOCqmeeCsf!J$$cO* zLkYNV6;G(}TAoPZwLG!HYk87{SMj6@FXc(aa35$)E(JOLaWgQ0`1ssc$ekjb%bg&c z%N-+}%N-$H$Q>eF${hj^KaiOr1l;$EJ4E;`cZBd;?ik^>+=;@kxKo6ma;IRp4>TqR zat|#0K;wML1kB#Zl`OoLD?xZISG4e2u5jUvT*1Oyxq{*D1DQ$4eOlZh!n)ky!n)is z!n)iE!dl!Z!m3!@2O5(Dxd-Mx&^RB6k1zZ_awZGE<%}18%NZ^FmNQKFBWJMiS5Acc zKxPIL@M9KNuy8I{xNt64v~Vt0yl@s*vT!O_GDi4;#^jQa;ukc|2jb&%pCM<Gur6nu zur6nmur6n)upwuVuqkH{Jp4dr1`%-ID$XF`wVYwXYdNEY*K)=Sui{J+Udow-;Xcrq z9LPPe@B@wWB@!^ZkRwqzmm^L%mm^X*mm^fTkRwpIlp_%CK9HG&-1mwjNcb&BsPJ2k zDB-spal)@Sl7ydfV7d=9CI@m4%zdD7z61j9+sK|Eyp}yycrAN`@LKi|;f?G8!duw` z;O+yN8A!kkEsj88U5*f8U5-d$U5;2`EsjKCRgOfA@B@v>f!qUgA84Ep#K#xEAK4Ow z-?GIBzh#RMe#;gt{E;m{_$wR2eIPRf2)HkcJwP~@Jw!N{JwiB_Jytl2JwZ5?Jpsdg zpfS04<n+hJzyRXobDtqwys$1?w6HE)xUeo;u&^PUzpyErKRo<EX8IFw-zqkL;k9hR z!fV;Wh1ash2(My`7hcL1kKsPhm>kGGu<!$o^TiP`yO1?bIF~hAIF~g{IF~g@xRBLP zxRlio?mm#2gxvRv)nE86Ymo3;)^OpstkJ@+SmTACvSPXqG$sdf56pd_aXt_qU-)fg zi4|VU5+%HrB~*AVOQ7&Z7GL45EC~03%=9DRM=e%AVO`cBVO`cRVO`cJVJ+4;VO7>R zjPL`E$;BeYFKC<(#K-5pkIb>cZ<!;7-!g{^zhw>({>bbr{FT`k9)2J*eF?ZPi^W$s zmnBd*mnBp<mnBL#izQY#l_eJLK5XNB#*C10K1)W({nnsy9%_yAf!g|@zCAtqn=D&8 zo!+U<0FU#5`Z^aEbUHOD&&As30rhb}7`bnQ%m(#8@b+^U$Xm|{>T7}e`1*{HaX!$w z`k*lKV__9u#~do`%d(UzV=5psLE#R%LmYJ06KHK6HO5px=?8QVI%rG=w2l?jcLR-c zZEIcQbmqb=XBeIH;HJ|B-O0`%n$j^AkY8Z^OBhYe*cM11Y<vndwgp;G3R(*z!^pr8 z$^aQ(%x8d{F?3rnl{H!zgwM0337uzy>7!(<1!O-c4nXIwfbQFX!~r8SwlGXOJK1^0 z&Bsolumpt}h;RS=yc389i8C-VHX`5g4I1MDrC$(6PPfQxP#T8$1H^{)r;+nEZ0r>j zF0zcE72XUC8jK7KMbL1m5|U@XEqI=-N~nPi#D<v%3KwkVkvj&9Z=b;12lJedn&&&= z+9v=?gCGn#2L;<%OR#Z7&~Zy3zr(N*1H*)5TZZN|J6x;zv7fC5vI}&t4XB(1-8lrx z(;zm;T;y|-(AV=*_nagK29C#ppd(;F+btMCeh1w#1Y6JF^S^#S?EWFpx_r<*LbVbB z!XWonJO-Up1o8#soFteSXgz-qbUi=l{vnVGJnQ+7faD3R=Rbm2&(FXByMG9}p8p6f z*7JkTwsQvUxnf{o@MHv?cLXXaKrV%x!2^;Dgr3U-T4M*2fnm@-5)cOERU@b%EWN|l z=7ZK{g3e+B<z?ix`NX7O(D_HOwYkV?5tKLe7!(*7Quyt_sj<=uLX&WI7s$EDX%gmc zP?`jV38>uxI`7hnfq}svOSpjKK;Z&%3%+mxxf53I!|Z^C4d`qk&{>J(hD`wj1L(vv zkXOL#zCmsWCGa2y&}nF(Tgmbm82A#wVbgGD9++kbItiv5o<D`qah&#`Fl?}s0Moc~ zHn#JfKo;W*Ly-G|p=qlYOBjOWKw$`SGp;ZM#RIZ`Kzl+!dqhBMeL*xxFUTF}VGEiU zDS^(7kdy9km4P;pGH}IB3d=y4dqHsqN^c+x%4?wcBv3vC?dAc=!OklK$$?H}1Bu}Z zD^NZJ)s@)71Gzm(PI!Ra2g-}c`4CiJ=Q5--<T5Zk;k9D`g^6r8m~L?245o3VCgSP| z^e_VL8v^A!P#A&kghLM_kQ^wCK<>g7Mj(Gc+|2953qAi0TX@kb{gf~?6n&>b*ns?% z!^pq@3Y&ary9AV0VCe@W2MQaI7_P7Zr5{k9!4@90N<aP#Neo#G3@lvs;Pm672Br_J zvjNl8Pd`P_FlxgRMj$y*7!gW85I6q^9TNh%)DO#jaI{K4b_@(p+-MLsp!CxL4VykJ zVFQu_g$<$f1KM|nE&W_zU|;|>fXJ=uKz%aM8KB7J52!9EVn}5uX2=KM!3jG5uozrE zJFqL*Gn{x~3#R=&?Lc$`dmEJA45k_G-iOe0|AJ|Un*#PAbqpeE5E@5og1oW|<aSUQ z4!S$Dk&%I+8rr6U<xh|t=zLR<pK#?*Q2B?&zYL%{5LOq0Xb=X8f!eqrHn#YnRr*w5 zU^rq%ApAgmJmh{hIrR~&kBFQeK<%tF=q_f5Ob4(l8uEN0^t)sTeXa;h<0@ImY3G2> zpahjCptzlhC2m1-ptuFO4_DlR@*m9YgxWTs{wAnTPHtX$!N9<92b3rn7~t(jkiSzH zG8u{)k{R+D${11^iWn*x6d01h_q~G7)&<@Bnh4Ha4OYSS4E;iOV0xD&gs!Rq(+xq3 zp!9h#&2aZCn0C+<um`Dk;FO2Zkw##;;h!~_cHs1b&@W@aG{crOFn!=(351quh0r}c zU|OMQBABLTJnjJ9qsj=m<8%`vWK9{UyhF~T-3*ZYk1HNQZC+x+5tJ`M=>a*P!tyIj z3?vT{1Mxv@<a7bzgQ5`DMuPPzkk@G;=PO!{WeKr$IfKTsVDy2Qsm`FWED${y$Fe|c z=0I!ZbfM>E-xhQfj1~srH9~1ZYlL873L3M4v56h0fsJi|+7O^}4pvTq@+#=uSWx>M zeLN5}X2pGbI(Xe1D9k|ol6#Y!K{QC5USnCRjF7P`18BHZ3H=eeEx1OgN+?DM#D;|h zC|oEV%L27CLG5=?xZoQLxFEFHX<m-3GiWRTSD(xnTq-dHNbSK@8bI<aY|IHXegk5I z@(;fLE2vBcje&yJmc~NQVMZ<wKyq`T^*FBb0Mw>723bU<HX<?Mp$8cmp-Fgv#`r<u z0cwkY&ZR~U50D%&;Q`v83<?rhdV-Z*ps{^W+5@Et<g$y{^Z{Cb`2l1wQoSa^zyLlU z8&ZSiGGsF3F{CmmFq9yj8xK19Bn>p41R6&QklNF*XQCZAH5u&z(+$UOK<Igl_8{?w zIsq`vFvSQ=ABeL7(+wwsz_bHP2AFPGSqP>bzSM(h1*0wqy=WqsKCossm{#yw2BsVG z*MeyUr%e#LX)l;Qz;Xmk<4WD2x*L?9L2*HB+6J}7lcDRTpJ7ScAURN6g2E41+6Lue z(And}ge~ao4p5zkT!(@B-=KO7Bo4wLHnKcO41_^qAUPNt6vgOiCxwxLA%c;Cf!wsC z!pOiN0SZ8*v;zvue1-yWTPP8HZ%IBw9)kiy8bc97K0_`z6=i@^Qx3T0R02vvpb>Hn zXFG-`LUs%wx<3a(?_B_)YxhCu*ymu{;U}X#SltnB2<@T-rVp&M0MiU1PGH(0(jP)w z#zE+vC15%sy&Ft3SWN)a3Gvgx^nodhz_fzVS}=WpWfPcIc(n~oH=N%Mq1BIo=?6Zi z!8A3~7^sa2DkB#%FfhDgU|`q`Eh}N|DUcj!3=|a3xY8JC?3mOz0HqTc2DP0)Y~(Zq z;)Bu?NDL+qON$^ekUR*3)W9%E9Y_va+9PLd1i2gs)ic<}*76y^rP73C+lF7q!6^z% z|8%nh(^T!Bg35DHd~AV^DIdcUSD*ulK<ye_aRu@R)Xm^=5nSO#PTvzbyl}MxY#12& za%m7YAb)|{Dxk2*V_;xF4;zpiC~QE*2d=OIwF7Jz+_bT!A6)kg5L@qo@(8Hkf!r4c z^&24LoFxp9@hS%Qg^;i*dJ3i;&av5p($Rs(8eqCX&m2PM1%qjao0(u5SBXGgn+ntq z2Dud!maDOZB}fhwmLT`z3QJI%8r5$H;A6R<d<;r=pfjXEc^F%GlQSoUoc=(071WML z4sXyrkR5{pLjzw4IMf`Lw}5F}p+`=g4VnvC%fP?@3cIaX!VV+{3OkTnaD^Qx9fI76 zD{MgR0#HAg+<Fu=&IO8N<gfwRg+6Wtnn`Xj5C@OafoXqFI}i;TrGwC$!F<pt9f;2` z_b-?a8l?mCag=`KgexfjfXcq((Du+xEM?y{=v)D=a0R7FbU%XX43OVpG>i>O+t|`2 zt;)q>2GE!$zEC4CFN4ZO(6}rp+@>-xFrbGUNDdTkgv!NYhJH|zg`dp`>kp6{9&#zH zPWbwZhLHXu=*~GDsfhgW0Hq_)7yzihXoV#mnM1{Jr6W-OGz29MD)tu%g$K01NR#jY z^$9`Y0cu~MhX+WGnDEeJ-~v_o80mwYIR#KT4hs)Z`UI6%$Ym91{M`lInn#R-DljmB zdWQ2e?7%%kP&frG1)qM&u<00>ZaDr5Odoj64LR*nQyxqoNH&4c&dy*OS8YIEdIPx~ z)K3G2?`#GJ2K4X+$$`Qb<R@I|4HPd}{0qL15Y+Ysm0h6n3RHH%Xpk5viK6$xXq8`W z7#Lpq&>;Lk<<~q01_n_0f!1N5haX4|6n=!tFB^t#tmPNE?K)Wc1l3ER_7HOV1jPYr z+lN6j2^=;K@=aj+fo2bwUSKj8Ofy6+fzVZ(z;wd;y<nQUX%STCFN22VLo8_#BnJvh zko$3^MNl1z<~IgVdk&QLKs2Ft9j(%z9RtIuLo^68Q2GPitqV$jp#Cv>`UA;<!i-S* zvt#H61r0{|NKSajrPMn8DvQKB-f9A=KP{MOum;AJfq~&V0|SFM0|UcLXk7^#F96Ab z#;OQ~hY6@~qEh`yOn5-+Pnv{>FEl(rCo-dl2S|>X@X%xU584`ykv>2RAz|lE6Fc6D z93BUteG%mH33P`fXuVb;Ln(M>9yBKA%n-!j%HYTl0=n%NRFi^2YEriyg9Vda1N$~G z&2aY-n0C0yZVwV?5Rrw@M|8pT0X`cr&9KE4LYKsV=>zkM!8C(a3xu9D0Zb=+p9Q9I zm2%|t6F}qLp!I5?^tlU5`UJ^=;sX>0xXL)tSOLE90oB!@@(vk;>RV6-2i3<Qc@PH4 z!)Q=)r$$|j9Jinb7c?Ki=ZHc1PM?7xX(`^2C9f?5Dhqc*(>f?!p{I3_94Kr-Zon0` zptdvU3|egAK~7za93Hsp;!uVF1{Y}BR$xe&zZM)e3I4mm^ns9L5W3_tgg$d0Oe+|@ z0@DZPd;!zAQYm?1395@hm$HJ=DQKTQdRT(wKw(L!E=Khm=mu5>@VFjmEFYHkK<N-$ zc+;xxfvmr5Xj)FAx(8GbgX$j8ToNd)A=f=Wq4g2I^amXm!YFHLmHyD$OHX+1z+ofX z4W>csFhP9KnnMr`T4x8QUDWJBG-#b2h^Bt}1JzBSump{@p@$_%4iuJz(jS`NXx<h? z&hNO&Kgjw!>W3Mq`~#gE1qw4zzZ5;pKysik1EooP=?~ZXJ9@7R0iB;wB_!u8y<@2p zjCT8B;H;_B?gXL-+qw|Y9y8FIG|)aL&^#5Wu3g9ch*OUhgax>*SOmCXbu4K81B^|} zbs?a0x9)r~1@F%Tg&Byy;kULkhz5z%V_gWSPXfAw8r1gQ2HoT2$CALkj#+@)kL3Ut zhz$!1P`J=*T}aiXInMu|RN(EWm_qs~zt+>BuCNE)Ee@J*W@KOh?E?elOITe2l9OVD z?4!Y#S7Ez~VBtr}xF<2;0qv*IBs|=q;o*TLJV0{9ga@v5AqtF;^PNbUlRyrS2Mi1h zS3r#vq`7@T&{{vFehFv|2<Y}3v^Ec@xAJSfUBjL(I|fj=3GD>a4SODeX$L+od$9OT zIWX<8&KOKL1lvOB%fS$Oa}t<75Rn6>6YeyF=>re@AT;9~2pzcsOe^f)1f~yY?gi7- zt)D^jN1(kD+>8tiC$YpANDdTVpfJLfenI0>$o)DT;l}`KCxS4jod}~rY*6_MqCtHd z5F6B{1o1&MvN}+-(JOyI+LjIm-1gKBZ&2M1Dic8W6u2@nFo4!Lp_dn+wTK`wT;UDs z+u&+jlC%B*Ie&oM2b$AF?#F}X`62Bu(B2+!n8<e9foM>h5=2usj6mbipmG8fMyXiB z2qXszBapjrg%QXfP&dQdiu6oBki9+B4;zrbG8h>cKw*=OC2T-)ps*p7eoAo6v(YO3 zK-V3xaM^>y#6=BEgZdm`K2_)5K<OtJ8b+Y~73g^kBnJv3Lg@$UX7Jrhpz;V?`T_N6 zK;r@A)<>Yc2F=Uxu@%q+0%%?yw7Ul!Iw~>X(886=$Qi!^tsiKChEWfebOe$Eg%QXt zxbhgN90Iu$SJ;rVegL^F0?lcG#xIb|B9L9^bL$Q#Q^Dcmu(AY9Gkj`+&|bX|x@!iQ zPT0Q~LhG*v(+5npfN5%mD=001_Ns&OC+HqW^t1<(1BENdAGpF5H1~n-M^N1e(gUMm zY*4=$Te_5CfZYFvo-RRlg7&C@^nkEF69a<-sIUNW7#J8pcO5!1g6^GM1r-5N4WO%a zKnze92Z;?8LZg(RXKjM^gM-$+BfEvkfq?<EJ{6<|G&TxaQwm}WfX<L)U|;|MvBU7$ diff --git a/media/image4.emf b/media/image4.emf deleted file mode 100644 index 5e9aaf5d7ab6a1318ea3581c1bddc650398490fd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 50308 zcmZQ%U|`5$KmZG728K3}AXI2WB?H4bO9lo7S6?><21bUKBMc0uSs55upz<)vfsKKo zg_(iDgo%N{4oN>q{>~f@2Adl!3~mez3_1)93<?Yk46eRz+Kdj23^EK13<3-c3`_zC zZiBQ{FfcHHFi33y0|P?}RIPyn6IdO@-UfSl2Nnh%kl_pr3~~;vaJH-i1A_<y0|N)h zOa=yqg^UagTn-EkDhvz^5)2FsS7%562ibFZ-+o8`OPr4CBCDL#MYNn0p?Z=S7{F$M z)PVGWFatw_Ez~LoWHu861A{u$T#$N@n&{bAK@@{3k~uIo2LnSx7y|=?0aOpjjd=_V z3?>W=46GoN8M_!77>$`PvVky&-32#?oq?eNW)4Ux$Xy`Jz|i0bwh&Ap*dVuo!f*ux z1H&9>7;-o;FgZZ&1BEw8%Q+Ciz`zh18fp*HgN#8^Fm?a`|Nqb7z{u>uz`$Sw3R{5# zw?S?OsR4!Mo(><UyUe$oU^FOfLE<nPB+kId$k-?-ASmj<h!mF$3?P4iFml);vq5f( zXJBBk0ND$rLH2_9AR3e|c_9pj|Ns9(Sr7^qW*{?QY*wUr5My9qU}s=p$Y)?+Fonkh zDEvVf5(l6-f$1eD9yFk70ptcyoNQoVU|0f=6Gr9<3=9k{AioJ5xDE5i$)7Dwp`p4C zw5A!D5ujO6Kv2Yiu>q7HLHP`nS3vGfU|?VffxDNoG=v`aAoFK1FfjBWneW5EzyM08 zu(Wp$nz?YMQAkufGB7ka!1SD)6b4SOu<`~Z4hnyeQc#$J(j$nLId#yPfsvUR-CeLa z16d79n;?vwCXv}7b7AQdq#l+oVKjpfB)x;|4x4lmM8PpEU4it$$`X)yAO$eBFf|}? zVWhNV4K1^zp=GE63j>2OGXsMe5`Qr>149Hf&x6baVNhNMVKz`%#Il@Omt{4x2Fq$@ z6_(Y^3M|W+6<8KC!^}{Cnu*U01r|MK6&7t~4Hj)?T^4O-0~S4I0~TXuP@xGb<B;9= z8O?pkEQH*b&Z5hb&7#4Q&7#7R&7#1P&Z5AQ%!2GbkeT@1_l{YG<u$Vg%WGy`me<S% zEbo{NSUzKQ-)0un@Ka_b<UVy)T^4Ot4Hj)y6&7t)1r~Ky1r}viWcPv0#P7a!EGjIk zSu|Kyv*@y{W-(w{$6~;;nFU+;6|<tc?=eC5J!jQrdCjW9@|snJ<u$7U%X3x*md7aW z1DT26eR-@ZEZM9YEZMBOEZM9EEP1R3EXAzY+-J;&>b}Kngu-t*n=Z?0HVu~5Y$`0P z*%VlovnjAFW<w4?keT@1r^lwkqRpnkqRpnuqRnQ&qQ_>yV$6okeV@_Xm&{Jced+AF zEZOWDEZOWTEZOV|Ea~hDEXnN1?gN>L-+k}cR9IfKX|TLz(`9+hX29}}&4A@IR`+dY zM-4w^4npoz=g?)*=Fni#=1^hL=1^c!=TKl#=0J8I$V~k1TgR@#vYK6kWi`7l%W8H5 zmUZj~ESuS}g<mlTs{0-jbl-ChU6$7z8Z56lR9IefD6l-|P+)nC;y#d>_}!Psp~8~Q zp}~^Pq05rZVZf5dVZc(%fz5r!oT%<w%t<KxmUHT|tmf2US<R`!vYJzYWjUt;%VJLC z@B^8N-+g+VDlFQZ8Z6qJx-8n91}u7<1}w&$*xdIS&3(ySgxr_TrOT4drNNTTrNWZU zrNENTrNENRh3r0%nfTrJj#Gu@HKzv4YffF3*PI3{?>G%uK4W#?W-iq5Q|2b*K6P$g z7Hw_~7Hw`77Hw_?7Ikg~7G-W^_kqmB@4j_hDlDtHG+0)1>9VZmGGJN9Wx%qT3tRXV zbECTNF+uk|=hkI;&8@-mnp=hCHMauGb8ZEe$0+UtnTg+hdE6>2+1wf|+1$D;+1v&! zdE5pp#oXB3XUv1@zQsI*!f!c`F3V~j4VKkBDlDsc6j+w?D6lN%K@LBVnfTqO$D_ic z&7;Ah&7;er&11l#$78@^%!AE+pV8cx%uC39>Abou*}NJo*}N(&*}MuY>AVUo$-Kz! z1DT26eeZZwSYGpJu)OBcWqHkG!19jAfaNn*_ig4y4L@Z*Lhe)N(`C`-(_qo&Q(@8O zQ(#f&Q(#f%Lv|m?O#JR!$E(7!npcBmHLotqYF-1Db-V^Fn|ZN?Uoju5`yLZ?-*Y}) zme+h5EU)=gSYGofusr8eV0nz<K9HIC-IvFw!jjFW!II6V%aYA!z>>#jz*5YI&3(rF zsP0?LPbmDB^Xsy#=GS0Z&9B0;nqPrsIlltSVt(ZC1DT26eR}*VEZY1UEZY3KEZY1A zEPDI~EXMrU-1iyHeaQlZ+?Ot(%aSdi!ICYY!jdhZz>+SYz>+M0>^_j0_}%x8Uxnp0 zzXr=|eqEN={01!V_zhS-V|CwV0o3qQ79`|8bwOPgZ9xqdZ9x?lZ9xSVbwLFdWkF>3 zfy~73zI6gBEUN`HSXK+@vaA*`U|A<%z_M8YTlf_VqPp)fLH9iu)Ma@ssKN4DP=)2S zpaRQtK?Rn_DDDH9iQj#Bf+{T8f*LH@g1Ri(f(9&kf(9(bg4o<=EQIR5#X^L_Z@G{z z%W5GFmeoQkEUSeSSe6SZuq+lr4nL5Y_}!-`q{5;tq`{&sq|2f$WWb^)WWZu9gw1`Q z(cG6TOvrud!n!Qk!Wt~u!YVA;!U`<u!U`<O!pQCenTg+h?}SuXUJGfkycW`Bc`anX z@=nNr<ug|IZ5BoiKV=a@?o$`hWziPVV9^#)VbK;*U{M!QU{Mx9b|1)0{O(&PtirNd zSc7G?urAALVFQ+R!Uimxg|UTSu?VXB9usuma}iyZ*CHA$uSHZ?UW+KOJQq=5d5q#d zkeT@1mnWjak}aaak}aakk}YDuk|$!oQY?baea51w?prKMDEyX->awgB)nHjIs=~5b zRDor=r~=DkQRMIgnTg+hdZH>U+M*gP+M>EF+M)(5dZGp_#-iBV_ZiK7$zp`umoBEu zk}amek}amfk}amdk}jsek}QVoK9HIC-S<vZh2^!V2Fq(vU6$9P1}yJH4Ol*7b>C(& z)bLXlC*(eLaa|T|aSax2aTOMAaRnB2aRnA-ab)*_%*5}$bz&+ktHm@}R*UJftQIq1 zStn+|vRMpU_!Wzzy6-VT_dOTaWqB>G!SY&Mh2^!l0?Tu81(wGs?gN>L-+g)FDlFOJ z8Z6o3x-8k^1}u5v1}w$m*xY9<f$Bah2}0p#C!x#YB%#6LB%#9MB%#1!C!xS%C4n4% zAT#m1PftRHMO#9HMO#9bMO(svMNh(j#aII7KG1kAXdK2KI_?Y_TQdZWw=qD*`e9>A zpfM=eSQBWB8O8>Ud4k5jKp5Y6vj%i*3S<swTn{v^4H5&5^<x`@2aRun#)qxt{)5Nh zL25x``b-SOjR~WVm!XfngUo^X0eS2lBn}FXX6U#WXdGLIp^HI>!I)W<1B5~Bp)vLj z3PaFXW{C@vGmHj>DM%bfgT%pO@64FvoS--bVdU{lWHu<Q@Q!UVFfzc#tZ|LKgVF;m z9+1c0LE@mXchJ~3Z0sF94#0e9x&oy`m^q;I334|GlaeMi7#SF37$NgdS`LtO2AUUQ zVEEt!8XJY+58$zPQ222;FtNeXF_XZ7+YGC<>_BQjZU@mI_d7E<GWalfGB_~=F?cdC zFqk<oH5_1IVA#UIzyKO&1*rvLJ_ZH`XNG)+JccxeOonuZQidXiM1~TEOt6>&1A|JI zErSJ<9m9PQJ1{-J08BSXErZer!8C)wH89=K`VUMyXo%T^)d#CW=wvG}eL&X}OgF3u zhR`#zz%;}D1_;g204fqd-T(zBoGk<mZ;+coVFSvOptuFim4MhFu^<Kph5|;=%nJj< z8;~T_6cDuslxV>7Dl81n42cXm44Di`3`Go?AW4$(RW^_okXt}uo#B0x&En*3RuCWL z=q*oG7(mv6<|{yQAG~jZ)o)>BVEC}_IvWFn4)cd|Aew>U!-?Ch948^uRy<Gg%b(d> z)@Wq+mTBhnmNAP77=iq@=a~va#4{BJmo|tP1A|M*Z$(arGmljmI^Hvvg61wKJW*k& zd7{GbU|uA{1<#vopzvV$+2RD6H>qc0U?_N^0><4Rm`g!!2jLkXm`m%$A#<G_b*EVV zI~A0JXq8FfMWSJfq9Olum@6cc!Sj{{6K=BY;J?gPz{$XnQU(@+&jW(|4VsHtz`(%3 z1)Z;|Wnci$qk`lZ7<ipRLwTJ*av*ns(i~_$1>^=82Bk?5&LEH;xfvK3U>FprpmLHE zDh7%RkR2czBo0#tvICY!c^McQK=nWe0|P@1sJ`)a)7Ex?%&&sf5tIKwc?mY>2y!#X zk01<+b4LbOhKACIb`4F-?HZ<X*@I{X3eq&p-5~QpVGOEs%^4UNWEmJ3Kw$_f2S9SL zFtz~ApD-|h(;rA4<R=&gxfO&17#J8p?gXVRkQ~eoSlEE-VvxC@Iubc-u+^6-+h;n1 z$|McwoHeNI17YOy8kr3WBba^2Y~;Gom=Q8p-pPoVhc*}PVlWprX6}#xVGw(0)P<n% z0o8SRHb=m9A&3Tr7f2jNgXF1E7c!GM4-L`>ixcF!(1;N-58cIxn1@D>0}vmkmy)^= z<OWc_BxWA^<<E7_ptc09>5(`O4GL3GdIZsg=Al9P7nIjQ7&(t4vq5TLZ8Z=ZR6c>q z92iZ^JTyojtX&OCCm{Xk^Uxr1Sf2r;9(^AAg(&JgG>A`V9{Ppoa^@$ZtC=5&u4cY1 zx|;ch=yK*8qKJ9u8&ESrWiqI|1i1@@L1iomgX*UnqI%4?MYWk9h-x!G5!GgXA*#px zLKJfz8sr|(oH4AA1>zH$hkhZN&hkVwo8^IMHp^|%Y?d3M=`1%y5%bU>_kqmB@4k1; zw?$twKM;M*{6zFM^9#{;%r8VS=b=IF0nHgByN}R3^b1jS)+eIctPe!BS#OJKv)&L@ zXT2ecn1=?r4`e2O_pM{OExMZJf#_<MC!(uaUWl$^c_E594-Il3XwDefeT3$rUx+?u zeIojr^?~SX*4v`5S#O9wXT2ecn1=?r4`e2O_vNwP7R_dTAeznkL^PZAg=ik@3sKB@ zXps9rbH>Q-BQy{FLUcLX6VcUd4@6h9-4<QVc0+VI+YM2~JT%CCAT#m1Pmk@ks5aXJ zQEj#-qS|aPMD^HSh+@t|gWLz2Ge&kFp?T;RqUr2UM6=l+h-S0j7R_eAA)3y9LliL& z4RRmIO#JS9$97xvHQNKx*KAKjU$easeaH4f^fSghG{}9RIb&q^5t@g7A*#;tL{yvO zfv7geZBcEG8=~qQH$)Nh&>;7L%*5}$b?moASF=A5UCsVPbT#`6(RJ)EL^0=~LGA<1 z86&%o&^+`D(dQgbL|=0}5Pi*YTl6)@4bkTuH$)Nh&>;7L%*5}$JdWF<*&Gi<vpJrK zW^=p{&Et3>ia8Gravx~U7}<S<=AmDRF6VqAx|;KW=xWZ}qN_P?h%V>6A&QuX2DuMp zCVuznao!fy=6oQk&G|%BoAZUJ9_I^D%z0>#`#^KX$nGOF5B)+ko$HBcHrE5uY_8j) z*<3e7)46VlBIcn%?gN>L-+k{mZ;QU>d?5Oo^NHwd&KIKZIA4fj&O?LT2bwcRb|0a6 z=og~u+)qTcxgUsXbKe%#=Ds1S&V54^F%J!LAIMDn?pw!oTXZ$o1JTu7PefO9y%1f; z^+FVL9vb96(3~-{`yLaRhkhaYocoFBYwic4ueooFzUICm`kecQC}JKO<UWv@_}!Ps zeOok}`+;aS_Y=`<?iZqY+%H5i=b=IF1I-yDyN}R3^b67DJWoVd^E?n;&2w9HHO~#v z<vce;5%bU>_kqmB?>;@A+oIY$4@9+jo``Dmyb#snc_E594-Il3XwDefeT3$rUx=pj zJ`v64eIT06ds{S{_l9UX?+sDJJT%CCAT#m1?;X!=(bqf=L|^kf5q-_`Li8Qa3sKB@ zXps9rbH>Q-BQy{FLR6jaiKsT;15s_h+oIZhH$>I>Zipi0p+W8gnTg+h>v(UAuI7Cp zx|;Wi=xW{<qU(5Hh+@t|gWLz2Ge&kFp?T;RqR;uBh`#1~Ao`l`w&-iV8=}woZipi0 zp+W8gnTg+hd3?7;v-uu~X7fD}&E|U{n#cD-6muRL<UY`xF|zvz%|pKsUC#eRbT$72 z(bfF7MOX9R5M9oHLliL&4RRmIO#JTC<G(Gc&Hq4DoBxTZHvbDzJ^mM>nDfve_kre& zk=;jV9{Po7y1*0BY=H-&*#fskvjuL5rVHE<Ma)Bk+y^ofzx&?t-xht%|3LIL{}a*I z{4Ye`@xKtooQDRv4>V_t>^?&C&@V*Q1)qp&3qBCl7Q8L0EqFszUGRn|VjddgK9HIC z-M3EQw&-es2coM5o`|j%cp<t@;DspWJT%CCpgCh?_Ys<hej)l?@QLVa!3UzR1#gSK z7Q7+)T=0e{VjddgK9HIC-IphLTQpnnfoQhi6VYtJ7ovHBFGMltp+W8g%^4%RkI+2y z3(@65PefM>JrG?jbX#<_&<)Y$LN`Pa^Uxsofy~73K0Tq^qS`_aM74#Uh-wSH5Y-cU zA&NN<4RRl7&KTK!gyx}Nh^7la5zQ8UAet?FTQpnvhG@F*4N=5AG{}7*Gx59cozQL3 z*Fq0OUkg1EeJ%7t^qtTPQOtR0ko!P$#>nm?G!OkkR9)nWsJ6%hQEidiqS_)iMAb!Z zh$7~pLGA;YiQj$egl~(k7JeYQTKI|RYT*~6>x5s3V$MT@+y|O7Mt0w05&ZLPFGQb< zJP~~@@<8;p$ZgTrA~!^zi`)=J%tM3R2Qm}C`|?C?i)M>F5X}~OBAPAoLNrh0g(&7c zG{}9RIb&q^5t@g7A-Y`jiRfz42coM*Z;P%Ly&<|>^oA&69vb96keT@1rzd(_R9p0c zsJ7@6QEkx|qI#k)L^0=~LGA<186&%o&^+`D(R8sVqS;~(M6<<ii)M@65KR}mA&QuX z2DuMpCVuz56TL0^TJ(YFYtbj7uSH*oz7u^Ria8Gravx~U7}<S<=AmDRs*67n)fRss zsx5w7R9pOpsJi$KQN%nn$bBF)@w;!G*lp3(Vh==Di#-utE%rimo!ARe%z0>#`#^KX z$nGOF5B);)x%d;&*WwREUyI)seJy@N^tt#AQN%nn$bBF)@w+ci{I+Pe_yf^w@h76$ z;x9z=#9xSF&O?LT2bwcRb|0a6=og}P5>G^(Bp!%5N!%87lDHviCvig*F%J!LAIMDn z?$eXFEvhZ?KvY}eiKw>33sF6Z7oxc5p<@^s7(nyT35>LvhX##JfyOyO<3*skWzZNq zwsCbOv3~Hlx((VqG-#X)G~Ncn$m49tY>*x3<7Mdc&>(YQ<F?3S?{d(w_jyQT?~et$ z7#<56GvAQ}VGw(0jJ<=x5Hyy#@$NbB*gJ>@jk$xwVKhjd8e{LEFo%t4!f4P;B%yg| zkUm&EAdkI+=7ZT87#J2HjlHAC0f-ONOUc+f$PJ)0d4qw0;S6+64BtE$Ec`(8V4yu? zpuJL{@lMb@6bOUn-8>lb8H&O4$axIu3<?a+48aVp3=C8LL1vS`W`Spk8=@A2X@=CJ zV7lSgBQVYI;X9aaxGMyn6?TwN2h$CE4Zt)*usfJOP#X=Vam}zXFc33u3=2b$+d*?| zpuKOpjFA10eW1B{22f0bMs^|dm>@aOJSNDWxaQbEdqlB^!GG}D1dv|PdJj+>!{#bM z^O(qNkc}|6!RF=~7#J8zpmBseH%DxIIWR!x)R5x~<Zl}W2JU3=tR;2B5)_`6jF9<C zM`)P>vJW<236cZtJq3y33QN#@C1|}6w(uZl9v3<N;+n_xWbk8XV4VXFk%pt2z%;Iq zAt#N2>MUnyxCCJd7myq%TtImfU$}tW2}(2A!iH99MVEo$_ba?1LSDWDrIk=<m_%U- z6ObGzObDeFT~J^!Fu>O*!1B%%1_lODdI8nB<m4TY`#|XhIq!h#QApX=(8~mw?N^or z(+7NY!8EQ^LtYqx_Ps_!!>Alf7=h$KVFYp)u5<(P2gJ>gwG^Oo2NY!VDr@W*4#+yu zAZ$SXs)UA3BbKlM$$`R#Q2GHcroxhbU}YzI`oY$I%iAgJa=rbT187}DWVERhsJ#Zl z$n7*_HYlIN!XFfOFg9}A%#R5&AHReNF(3b4rG(+ViYK$Z76^mbCGd1lPMZMK4xq>W zd{Fp=>I6A`{;lBxqe0;X5{J<s@xj<O^JRjx4VE!M*42W_U-UQt@nLaDPCS762B7sh zpmYI>lQ#?u3=g37KEAph7Je9O1p6L?mfnK0IT(Z59oW_gg4R8P&bmM@<3R0{5QapC zB8GH^RE83URL}_+o2Bg-0_E)(RD;2E!=)B5&9GtygwEd#q4%DL(5D|kXvzN&nt}Xv zez33s<zwVEf1lCT{7nEUpz@kOP<)6yQ30RN09waqz<!<$#J_G_P|jvjP!1CV1u_!@ z15*H_4s!wfdC*b-1_p*mh8K0GSU_q(^@un_7lR860|TQ$LAeE^4)b08f^vhZQ!F57 zKd3v!vf{A{!{P_|<q$nww?Jls#6LV%VQBIfD+iee5}O$yR&J8rSeG8obql1nfpJn9 z@|wRrk3l65*R70qDhvfh66I%D_j3OG|NlQopPNiy8AuOkogZk;A7}+1h^_HNg~8XN zuMA`ssP&6$%^zqDT_O_$187ZOKNIGfKaiXh^h^L;^-&D?EC<x|1qv__2IVaf4N9+| z^^_nQ<Y!pkg4ONF`GeTH9hO%>{g^eNz82crSWy0RW5{GkWyoPjVNhUjVMt{tW5{Gk zW=LgVuvul>@Mf|dLn@~om~K>t(6TWQ+OiBnGt30j4R@A8=@SrI>nVi3^AAird}Xx< znd9(B5KQB0HIUQR1hso2nHU)47#J94FhS0{0i`im8yqC31zlf@D~>?@8C+ojiXTv& z1&SMF8dPq8#9;Cu8e81$VPIeYt@}c+S3zgHfcj#fG6}TK8P=EH5GCgVTK`3BdL*v@ z0);7POaw#|TK@%#Yf#Ao!pLnIWHzY0gsuMqsfUe?z-VIDe}VMD#<M`?fzlBA`Y(_; zzV%=8)lt`ff%t^hf6Z54&OAqbHS=`!)y$LCS2OpkFK6yoN38$qhnflM%Ynx8K<)xz zP~8c_p!D9auE#uCU7LBjx;FD1b#3PP>Uzxc)iKw9f!qUHs|6b$1@Q^3|C+C!&N4?m zn`OFsHp^u7Y?glYbe4W~#QHCg`#@&mci%ha$?C6}r>nnao}>PndA|BP=K1QF>%Tzm z0j<?Sb|0bjU-Q+~S?8#0vrbpnW}U3A&DyW7&f2ezSpNlbAIMDn?pwz)S$#FjboJFN zbJSO}%vWE>GG85Y{TIl6ptV}a?jyARYrgt();a30S*NSNW}U45nzdj3IcvW<V*MA$ zeIPUOyDyJ*vU)b_boFf3IqKQ0^VRcM=c{9`{{p!Wv{nn*eT3G3%~xN}Hb;Fm+jRBS zY?IYjv-PVlXX{r-tp5VJ4`e2O_vx`sR@Y{muCC2CM_rq3zPcXUe09wAUm*8^)@mWU zkI?$B`ReKHbJVlhr>kePPgc)n?^jP}?^j2x{{p!WWF~(1y<?lK{+eyN`fIj1>aW@6 ztG{ELua3F?3*<h~S}kPv5nBH>UtOJJj=DC-baicx$?Do1{p#u*{pyJIUm*8^%*5}$ zb?lSXSF=x7U(G&8eKq@h^>ys?)iKw9f!qgLtA*@7LhHZgt3T(MqyCy>y83I5$?C5; z`qiIv^s6J*e}UWwG84c1@;D}|XLC$f&*qq;p3N~|J&$9)I_CN>ko!PuwUFIMX#LlG z_2ry%)K_y(S6|IJS$#EUzxr~{es#q9FOd5{X5x3B9_M6rZO-ZH+MILLwK?aj>v7Ik z$6Wsfavx}|7P9*Yt^b;@p3XH#J)3K~dN$W&^=z(w^>nU&b;SBFko!Pp;&<OW&dKVp zIj5_?=A5JcnsdJTJI?v)nCrhl?gOpWLUtda^<VSV)w$=WYjaOm*XEwAuFc)AuFl=B zj#&Q%av#V{{O()FHCcT%*L3yOTyxY{bIn&@$2DIabNv^{eW0~k$nGPw{%gMabM86n zueqnIzviB-{+hdA{W*8PI%547$bBF)@w+dNd$M{q_jL7a?m6n&-1F7*xaX^5uKxnL z542Vb*?ol8f6Z54&ND}SHP3YQ)jX5cSM&6%FX!o3N38z>xesI}e)s9|Ojg(CnXazQ zGe=#UXTG`~&wO>v^<N<Of!1mvyN}TNuleffymQpEd8eyq^G;UJ=IvKc=j~TVtp5VJ z4`e2O_r2qptp1v3y83ILIqI)@=BvNsnXity{tM(j&{{2I_YqqEHD6twZ;rY)-*k0t zzRBv^eEsU`eEsT(^<N<Ofy~73zID8l)mQUQS6|ILM}0N#eD!s_^VKoee}UWwTC0WZ zK0@oi=Bq#Fo1^}kZ@T(xzRBvZ`TEtL^YyDE)_;NA2Qm}C`||iEt7r2~SI_2~qn^z- zUp<d+zB=amFOd5{YqgNwM`-=meD&r0bJSP!Pgh^fKUsY>f4};2{(g1D`Y(|CKxX21 zpC12Yb#4CX>e~Es)V2BNtLyR4SI1oc1#%x~troKT2(AB`ubwV2M?G6$x_Y+2Wc6%; ze)V*Les#q9FOd5{X5x3>JO0V)ulc8|zviE#{+fTj`aAyl>X_@lK<)#r)k1b3q4i($ z)zt;(sA~&OSJxJttgbECudXiGuZ~#%1#%zAO#JR!CooxkwZL@s)dF+WR}0KnUnekM z9drE`$bF!-TFCArwEk<p`g6fK>aPW-tG^bUto~ZCU;VjYzdB<57s!1eGx57GPjIq& zw%~O2Y{5C|*@E-c^91LsW3K-Kxev5f3)y{y)_=`cUoJF9eYMbZ_0>X?)mIDkt1lPo zS4XV>0=W-lCVuzn2~Ael7MiZEEi^}6TWG$zp3r=C%=KR&_kq@GA-j*z`mg!w>B4i= zvxTRtXA4hO&lc`iPZ#c2N38z>xesI}e)qi-nymg>XuA4qp*iZWh32cj6PmA%x&8~} zKG0e%WcLwT|21D-U1W~Bw#amKZIQ|9+9Lhx>LUH>i1l9}_kqmB@4j`ylhs!XPgh?p zJV$-C@O<@k!t>QJ*MEWB2U@Fz>^?&4zviny7n!5}T4cKVYmv$7uSNRRpNsUXBi4U` z+y^ofzx(n;CaY(QOjpkqnWLU9GG9GUWWGA)`Y(|CKx?&--A8Es*L?NmqI1+&i%wTx zEjn3!wP?Tka?yTu#QHCg`#@&mcb}f<WOZ%P>FU~|bJVp(=d0_9&R54={{?a%Xss5q z`v|T7ny;QNHb*^MY`S{3*ktu=v3~V*v3_;L`Y(|CKxX21-#gLC>aRtotG^bVqyAcS zzWO`S`RbVKzd-H-t<^$yAEEVM^VQYG=csFoPgmC#pRBGe-mk7M-mi{W{{?a%$V~k1 zTPHSIeYMzh_0?i?)K`nmS6?SKUmbJ(7s!2}wOYvTBeec&zWQ_VIqI*)r>nmfpRE2` zykGsfc)vPg{TIl6AT#m1FHd~3dbap<^=$Du>e=G+)$_#Xt7ESJ0=W;gRtwpEgw}t} zSGSXxqwXXzUEN7yvbvK*zq*}7zdB<57s!1eGx57mPhzsVw#0OGZHYPR+7k2C^(5x2 z<6i$&&IDQiRl`J^^<SW|EYN%oXuJqCj{zF<#5R9;CWFrfv_{DRZT%N$oC`GG2ExeW zY{+bo8uan9XtXoHL26)Q=*V-7mQ0Yn*SnY?>qJ1~@3WP=7-lOQGf&Y5VGw(0tp5Uq zA!safijSTPj0S}%NE}9k#HlgI2#QzOm?n${&6~i+tkI^X;B&MfeXw{yUjJnQo$K9= zG}ntB2OvI7FC}w~AUA;0B=R^szBxu%_+iX35_t{@Xr3N4{{<Q&1<gZ%Fvty#48aV3 z3=9ig?HJ}~*fq3H1Jew*_d#eJGls;iqX6YK(0mTauAl)tCnSKRb3#C)$&fii&>111 zGe*Q27BP6TFfbsW6M|>X@HWT<0&|A9LGyp0c|I(2hPP=kXPCgiz!1R1z#s^U2POsv zP~3px1vVcQ$OJh92b3mo%}0UK5H!7j??#~J8Wvdk2F(k?)_fqRRghct85#t>Qz2c# z@-N6tke@)f1R6G=ItV>%Kysk6AEX{v*nrl{>4PF3%NiEYTp+1yppe4@<UZ_q*9Ej< z?k=xADDOJ#PzTco<~o6CT(g<P<z4hJ0;Qj7Xc*1Ml72wp1_~p>=?COy$k{KjavEkA zY+e}_|Dbvrd0rX0&URW?48FhP!K_>-9mzjV6OJZ17FoP;0>vGu%mLN4AoqYUay^aA z2B|@>vy0b3j(>u=38V(bMy|6#XC2frFfe#AFfe?Dp1-r5`62suW@r9cEFcVGKV*mL zC8w?c)eqEK7i7022Ye3#C>?>;b%N%0LG27sl2uZh>~vnE#2G|`!V(syAQ~nPqUlj* z=PZG(1OvGYv7Qi=u3%w_TxVNB&lK`zU|{$LjR)lLhs6g>FFEl5OH&{>fZ_yKI}(;A zFXydx28Cn8(Im&P)uqm$Gzh}TX%Cr=oW_vZ$muPNk%0k}-qIKu7)qe)r1L}{vge7~ zhzE*+Fo-=g(%b)*P0rtL?{o&ypm2hP7l?+5gXqDS-azYNLF;eQ85tPLpz(kl{;>F< zW_knNi2_<z3@Q&Pxw{8e2H?621vxH2VUK<n3MdVOFml>OW`oi$-gO5^X9N<P&%>c- zK!Pqe0)=}dBLf2{EI@W?uuz`n(epNPT}_R!hLshd@)lHnfJ!xS<E73)9xTqF^bQJh z5P$2!_fCT;%t7Je2}<Lj6?C9|SquyeAonj9apeG&JIh7tD5~2)=7Z{KkeQ$|6||oP zl+Iyk9MsMNwF5xm1`0EB?*74--a%o%N-P*$=YeQ!VGna7D6N6gJqRPGcVsq54J_@0 z*s%U6jAlT(`v+Ir2kC>gM?m2M@;6K^tULjU<6Co+C(6KJg>-iQKM@EY-+0Y05i8zr zB4)hbM2vX9iRkkF64B!QC!z&E+aF}67J>T#ibb_}%S3f~%S4TM%S6q1i$$$?^F*yM z&dy&4bq{Pz$_~oM=RPYDD_%1ZGhQ<hBVIERU0y2@EnYh$_kqkL<i5=!TD;ptba}Ul z81ZfsG2`7VV#T{o1k-)*gdyPtb6*{lkI#Ko!dARx!e+c>!bZGh!n(Xw!dkp_!iew# znMuffpM|w}zX|K|eiJt0{U&V2`&rnE_nk1N`}Cmhfw^y=5X8Os+_y`}ig%lk8SgeB zBi?O7y1cuDw0QRkA>0QtlaTw2LH-fe<uwyF;x!XC<24qx;?=|AzC5UVVD9@TNZ5V9 z1g&_#37YYK6Ex!eCaBB%OHhmVpCH10ATtTMuUJTnw@gTvw@k>0w@k>4w^+!EH%|yN z{MJF;19P7pl#eg`tOTui%>>PO%><2j%>;FMtpv4r?U39DGLw+|HVbO;ZWGky-6m+n zyG_uHce9`s?>a$D_q`K<gcr<xbx=M&_f-j4@s<gg@s<e~@s<hb@>U6G@zx0-!VhF7 zA@_Y2(Bl0jpv(JBz=-#ofEn*+0W02j0+{a8gSrRizJ2@<_u_NkE`BTCZTx1u+xU%m zxAE)p?&8<t-N%n`AIMBX?lT7YM?ja?Ou&fOOu&rSSip)`4~zTqpzeXW?;jsw_x<9t z;{C>F#`}%Wi1!<xF7GcsE#7~82={@^B;>wgel6ZIeqG)&ek0y8ely-;ek<NQe$4P& z2Xzn3eRfbjzVNf+v*I=5GvhVmGvYPl)8)0|)8e&5av#V{Lhjqlr^UOCPnUNapAqji zJ~Q6Ud{(^c_%Pk~ju#SMF!$9#`S{#d#cRb|#%sn~#%sh|#;eO)#jC|z$BPI*keP(s z_nB9V_ZzP+?>Al}-fz5Syq|fkc;E42x=#=49+>;~@j%>*&waaita!KanDK7oG2-3E zqszOCM~inK55j#QGYPrR7~~&bU0yR@BVIFJGhSm}D_%V;?#qL^2j;$i+=Siti`$C# z8@CznH*O=|Z```Pzqqw{|8XPS2Qrh8`-*wAc*}TndCPc=c*}Uqc#C<gc=LEL!*3nb zJuvs#LHYQ?&x+fM*NoeY*NoeU*Nj`2*NR(<*AB^jATtTMZ!@<R?>25--fi4QyxX|V zcsFxf@vh^>bl*EJNO-~AR|n<eb6*vg6>k}r8E+Yv5pNlnE^if=7H=IFBK$yR5^~>X zE-l_~T)Mp9xQuweahdUc=Ca~_$A#%WJ*azN?%T%+aW6ji?c%iJ-NtFgyN%O`cN?cJ z?=DU)-hG@1_kqkL<UV7Nf4Fpc&A5zs&A7~Xjk&CN^{}`v59%J6`~GndcHb`!E8cG$ zX1w1xjCj9s=<@#J(Bl2afp8zlOhWD}=G5XX<J9FX<22$e<22(f=CtC?<HQWVbx`-f z+-C>n;|o744l7<W4l`ae4kKPO4qaX=4lQ0gB=>>LB;>x$99q2FICOcpaTxJ#<1pjh z%wfg5jsw$u@7N*X1#@2=l#kDSRqR&0W$b3WW$Z@0W$e1VRqR^4b?k`n1DQ$4eV^I2 zc)zjh@_u7C;{C>M#`~GwiuWBmru+1u?t!^)9~;EI_}sUP&5Cy$n;GvmHY46`Y`VO= z*tB@}u_4?CGLw+|j6wck*X1>1H{vy8H{&&Cx8l{q;=VkndtmPS$4c0JzgVq!zp<L} zeq%M_{l==x`-@eJ_a7_5eIPRlxv!W_i?@tTm$!_~h_{T*jJKH0iZ_o9GyK*;-2-!< z9h8qR{H$25c+FVNc+FUic+FUKd97Hrc<qqf2Qrh8`!=&`@or<)<=w_=#Ji2vjCV7u z74JG$O!vKGfrJ;#eY2o^eD0gdV#Pa&#f*0nixKZ67G2({ELyy?SP<a{GLw+|KC@`? zeq+(){l;R%`;Enn_cMzX?>iQR`#@vHpuI()%K<>=Ft{@?FkFO=4P0YjV1V^WL31Rq zzAETkei$1x?y3SE%OU2T22fuZG%i4o@fbnTHBRqu`M}2lK>W0zNM~$g0!V&9+S`e^ z7aZhnyyE~wjDdm7fQ1`qtQ#~21{#Y1joqJSfShjynq&lx1thYb<C(=`#GA-EjTfc| z6xJ{{C=QU^3>roQ4J&|z;cSq7AoD@vF(5W5+(Bb8pm8?XcnoMP#sqZ6J?QQW1_lOV z?+eE_1_K)Z1<fm{PL**1(Ss?xL1C86$iVOkboK`mWNrZzHi2T!{A%jX{IKw)Mp)A$ zjk}jix^$&fIm5yl#20>>JLuAQ3KIhZXkTdw69dB^=$K=i+H!E1$En@tqh`2+(laRC zgVH#*xkXr5f#z|L=N3Wv4wODX7<mj3nGH%S=wo^4bBiEzVE#d#>nUPlVEDqoz|hFV zz>p1{V*sT&HT9)poEjiZc^U-eaeB-xS}Q2Hv?y(L2GO8A4hvHd4HE~^puFEm;k`tl zFo%t|!f536K(Mh?XaNXc4+PQ&iw9778wS14qmT)b|C^W?7;>QTfE@m?_<-r9Mp;1b zad6O{Q&9MW%3=@=iU;(0A5b0v)eWHZ3QF@JjGWey*`Tn5)qf!Muy}yc#EgT3^uh8D z$UIPd!Qu`U)*x|Mn*+oK&Bue<C$Kx_r>iqCtVO!RP94g}*N#$FUn?fBzEVtHeW{qd z`T{X!^|@l|>T}_D?19XjD+Z~5L1hQXT_6lvrvk#Dy{B{3=Zei&Um!MLeW}=d^_60C z)YpnlS6_>9huw8GRQIJr`S{$IthQDxUTvjVyxLN+c(ny$$!c@O($x^|1DQ$4eRtI6 zirrURAa-AEsn~tBm11|)){0$M!*riG)IG3v=yFwvd-1t%vFci}`Kl|$=Bq9ho3FY+ zY_aNGvE`}=_kqkL<USd-xnlBa3&iBrmWs)%trU|{TPr4x#eLyW_rTouT!pav9;>Vs zyRWiR?7qrUvHL0u#2%~66??9Na39D_Lhg%Eohufvx<D*mb*Wgq>PoQ~)wN>bs+i$7 z9qJyK`_!R)eBr08vQ|u9Wu=(B%2F|Tl?7tTDs#ouk=zF|laTx7sLU0cud+aFzRFUu z`6?^L=BTU{o34WCzU#`6@PfH79m>b&zGUUKV)4o=#p0Ehip4805KC5`E0(T|2tSaS zgxq&Wd9K)f<ppB*m6wX$S6(T0M|rK-b!ANVi9_83bKi0$h<ow5Z?V!^vH40X#pWw5 z6`QZLKy0znT(RX!2={@^B;-CB<+)<=$_vEgm6wXiE3XujQC=%1j>Uc9Q1`&x_gs;% z`yMN<6}zvvQtZCsQnCAr3&b8P&J}yEh;SdsOhWF9QJO0jue3lcUTLXVywXas7^Ssh z;Yyg{Hy!F8nETYBe0<@jthiQ8UU8+Eyy8+ZdBp`{%8GNv)REi=GLw+|<|xh;o3FS) zY`)@BvH6NC#pWok6`QVz>Avd<knn=JFCEIq=e}fxwPNuKE5+g!mWstIED%dpm@Ag9 zfCxX3nS|VTM`5nmeT4;L_Z60k-B(yCc1K~Y*mVU=_lZN@19RVUd5C-Qxo@%jTCw@^ zE5+u^FBO|Fzd&rU{9Li+@(A~V%p~MK8HKrG@(K&Y<Q0~R$t$cBlTlbJCXU5@;ZXO$ z-1l6Lu=^g%trfd3w^HoB+)}aoatp*B%gq&gE{AX*$V@`+i;<rz7B9a*EM9)8SiJm7 zu^9QaV&U?b;Wr)X9+>;op?rMdr!2QtOkQrKn7rIlF?qQKV#;!J#nh492Qrh8`{u~a z6`L=&Ky1F;QnC4RE5+u>treRthv~lSvXJnCxi1~c$LGFe*|lQvvMa^nWtWP@%PtU0 zmYpk>E{h01keP(scSm-v*nQarV)td2irtr8DRxJ8t=M&0O!tXH-2-#qav6ww@wsoY z%v!PeGAqUA%PbX}FS9^wvCLet<uVBOfy^Z2J{j4$V)C*J#N=g{ipk5a6qAu%D<+P` zec@2|z})v-ny~vGORp8XFTGOizVuSD`_c=<9!t*^doGP|AIMBX?u(I`D;6)aKrCKn zsaU+sO0gK3wPN8inBg}a>K>T;)S-NQ;ioLUR!m-crI@_*QZaey1!Bt5bH&t=+y^p~ zko)FH&lQ_5y+CZf^ir|;(ksR0NUs%}E{*BF>r#;Lg1Ijp%E#xvWT~}c@lq?r;-!{~ z#Y-&^OO~1|mM(<|KaiP(+;>N6uGoF41!DK5mWth%S}Ar%YOUCHDNOf?L)`;&-*QQa zd-1t%vE*8@`I0Ne=1VRWn=iRQY_a5AvE`Bo_kqkL<USdxxnlBC3&iB5mWs(strU}y zS}P`w#eLyW_rTouT!OIs9!snhyDza)?7qZOvHKDW#2!n`6?-m$a39D_Lhg%^oGTVD zxj-yla;aFn<Vvv^$+cqPl9=H)9qJyK`_!R)eBq}ou~tl8Vx^e8#8NSNi3MWH5_84W zk=zF|laTx7NX!+RFR?&uzQj_o`4TI|=18m+n=XOrzU$(U@PfH79m>b&zGU&WV)5cD z#p1=6ip7gB5K9)HE0!*f2tSaSgxq&We6HAi@daY{#g~fR7hfrMM|`c=b#YAhi9_83 zbKi0?h<ow5Z?V`~vH4;v#pa7G6`L=%Ky0ztT(RY12={@^B;-CB@wsC1;tRy&#g~f7 zi?0-u5nn4Nj>Uc9Q1`&x7YOC!bDyu+S}{+tm13S^OT|3J7Kr(Z%@qqoav#V{Lhg$Z zn=2MCwm>XiY^hkh*h;Y&v9)61Vu<iVAEyV6VP-HgFo4$Q=Q2`%oF3Fy2aP4sV+?cm zfgR4vST=#z4THuiK>S399TbmYg8Tp*pMcTCj2nUU!Nwy%<3_M?dQg}rF)}a|Gcqs~ zF+$c&N{Ty*1&S>dlN9F^hv}hYya;4BDBR~TFff45YXgm8Qe(X;DE)xWYXz;l1fBf{ z8s7ko-5qe~aJF8c?gFC=XD)G$y`|&=qOpw`fyRhH7<p_6nGG7V!8=Yw#5@To3}9gi z3x6F31_sccDt<-=h6PLv4Bm_k3?P4SYH$j^)CA!vBHJ~lh`{twBMv}kDT4O@K;nRr z8Cw`i+9|vEZ(r^V3QJI!f%sFZ7dnGzkT?S)W21-zV*}{!XpnnB^CqD117YNFLuP}* z5atgM8#W$>JO>9GR|bVk0}}%S=#1-LCI*H8Xt-R^_%6b!F-7EphJgr(4KoiEF4)Wi zO&o#T1j6{{@#vK{LF1MlsZ!4WTMjzI=%0JdoLzoycLvdeEp39zhM5cu46Td|3_BSh zX){o4Ij5ln2<LD!i05!4#{rB@Y`7zj)q>)Hn6wEhN4Ng80hg<wFaz;zn+%*mG)SBt zX)~1(avmk9yxa>77fJC8+<{^_+>+v)+#ohAEU1w-k>@_}?Yq^OdCa-j^MezveYc?U z5rjc!Zelyz7dCGSI_4CVFJah-fnh?jEyJ(%cBJjo1KA}8JvS6I4-boPkh%Ew*wW%$ zUXYz2e`k2#WP|OoWn^gBzvZb4_%3vf?A|iXoZhmVp#k|Iw>msiVNiGmDLFvr=z{jZ zg2X^)--7noMnm`5g8aCIF_OUm_qn`xKxzo=vAqK_AIBcsJG9ti3)-hSg^_`wkAZ<< z4kH7@QnWiPKynMAVxavEAV0t`X#N0%LG_3cR1lWlc^McQKzSK7A5ZE%6tMJ*yss8L zE$T5ar10BOo)%&51*Hp6Sb#9-P8(2ofbLX54-b$WG2x-d0Ge4r>;<HCcsMgKR9ev} zJQhRK#~Li@10+XGcsMgaTB)$`hJ^=m8ytDxEHUL9D1Ct93$(@rIemcISV0V-3@!`} zd%7TDBD51iUwRLrNjf6{l(dn{FPI--X$G{<cpWs1E@BBIkQ^wCK<>hohd};-xcUEo z(48;1_8HSEKPfOUXbRcm&rh_>&o<z?#le8vp0c_HJ#IkZ3M#{vLCZH#Jq?OC*ck#K zIZ&GhB!(+)K;;{#eGEzmF!O1hesdYp8FCpIp77d%!$h_lOgFf12Gi6HBT)JUm203d zI?BkvfF4F5IZzl8O1}^{+c1Fo1JpccftdQBgrTA6I}O4HlzxsgGBAL`<_wmw0m*^F zhEVze)q(U(KmH6!3|R~eEL`^B^y8uirVp&M0n^k^KcKyipfGxgC5%9FpfDnoexPoK z-+P5Eyg+ACfcDga`mN;D7ofTVnwP<6F@WL?)DN{|P+(wq;syyFl^6((qn5ySwm!(M z`05DI7~3moI{Jboj6iarFao&+UpWMFCl|;vEN6BcVPIg`0loW!oUj3%pAWjz1Gz2* ztxqXpNM$Hy$Y&^JC<5PU;BYb(96k;!OTaY4rxpn9)eE7!W`OC0{fi;A{%SCNz+?-U z#+CZW30F{B_z4YHdnU}X3nT{$SCBt&g)6APiS9>G9|083Abp_v7=%G$AU-Jg(dz+n z>gCs6Yn*;ZFL463V{rAk48ipx=&Tf6p@#iz6p$P7rAJV?7R$iE5XHd2kjB8kPzY_~ z!|FwlTrN}$SGa-dMMH-F|3P-qD?Fg>{`nac_CaCp1?7KGSb%UkG(0k~ga=5DnDEd8 zkKAFl`$ZTT7&sUi7)U9%kkiK%1_p)`pnzszfR|gKde)f%(rQ#-0HxqUhEi}|En!e# zNMp!nD1!6~K&NDZTEd`E1GR)fG^iyEqCu^``5AT&=cK_W@Hni~0@DmH?ZNbc;4m=V zurCKpFZj~{p+h>sG(*({FulNMDwuXSKN~{xF9*}OQY|@o9d!3f4m6HH>uk}}EJzL% zN1$-Qm1aR|2!$CauY)kC4GvmE2s(2Hl=ng90Z1H#L2OW201^kugL-=)aZnV&(iW_Z zNUO3zfx)4E9o|r8U?8{6j-2*zl}$Db4+1w6u%DcG2Ia+n(0FEJ#4MXYa-ety<y~Cy z3@V#!7$D;|=<$JkejTy(ByxCw>YM^lL?h)zP&$CLe@hr3?U)B2_kzP_!Jl(r+JXHh zm}U@q1*Q|sKSJp6{}9@Z)q(ouJg7bgl{=tvJ{U__g5*G9335NKumshQsD5LBxA8%F z4Wt*8SLmJo?HD#(W~V`zfzlu7%p6dd#bOCFkQ^w?2&F&RsZi+YkDT%#=l6E!n))DT zd~F3|8nzWccSwTv@6<#0mw@~ZYb$`{-VxDOFlK=C3h5Odv}`MY?u`V6M>Cf20Lc*( z9(p+1P8y)Qgh^~GAg7NP3=9n5!DgiL2~-ZdGE^|6G9)vUg74-7-BaevpumvKkk63I zkjs$BkO#W24>XDhY8O0j1D{&haA!4`W(c|lrW?|KLFjqH;8M%sr6QPSP%#J74ksNT zG-ouJW@xDg(+j4wfN6$Vy%74=3^0A*$x1NY@O~GBRzC`+AH-Y$)6{G~fci#lj0_B* zc(a4<lR!?#AUROHfx-$`SqLiki3vwg`v8>MK{TkH04f_n<s^s?YA=A=6`*r1L2Q^j zs4N9xkQ$JBP!&Usys}qX-DSCVJ>Igz1X6aW3Dclmy_kuC0aRzNVPaqqWdyBK0Qn4Z zM>a@K5GsZ%%t3Xz368u%&UgTFc;Ffj&;yMJfMys#Ap*)1AezeK0c)Y*vI$GLfaE~o zLTEey<W5i;0);4gS^?da2fBBils*S?*nrY{3dmrjas<@Qbq4n}62YYi17D&Y11N0R z=RxS>yTNpW%`-6V(8q2MmcJ<qp{W>#Aop#DhT$75VF;1~g(1kzxY8DATn5=cpnM0* zr=WZYVuOMJJ#5LT!;!-lSDRX&;efC<-jE`{zyB5*R$s7$6-W*gR-p0_S6G4ap+1AU z3%2l}Ray&WC}2oofTXpCK5KBuG`tG~(+-ijV4C4kBZQXf0n-Wglfg7K>kd#_1BDx? z95Z0XEXP1{pztG<){y-JYcqq=+yJGuJ9F`d6!~cl6h@%1GRG2DAURN25l(BMl!iH$ zLe4lRa^Ax=&KU&0wYZ1@bdzft=<e1D$+itY*V{4li`s$dsw^<waA_ihp0plJGiV$J z(+zXqf@ua3E_<+gDwcJiJ}0QI6k}vyc*exQpbM=tVQp}boF-_DiGhIuSN;X{<Iw$x zoc2Iv9jGn=rA1KN1r+*pEcg86@rD}tY4JG|0|O}B-eCzhkQ^x7$W4p1D)&Hl2<L#) zV=6<#Nqun0G;n%>X$O~hFwMZ938oKt)`4jUuQo7E?Q-uuH2jpAG1DDL4itWb$~|QN zfZD#GGzLp+pmc{Vt^Htt?5iiY{Q_$5gT@Sz=QBWME~v+o$B@R5$&e17(*V^jnGE?1 zd5|_RXbzg6(T)L3M?>h?Szx*$eG8ao_<I~oH>iJr&~<$FAoUG#vJm>5A((cMbO6%~ zPdp)XN&<w&Q8JL1#zE_8LHS>gk%2*gnSsF-OWEMa$N-*K!&Nq9Fff37f;hs30oF$W zl^3A62E`qyi~#XL@dt`e5DgLsiD8RRTD6%J7!I5(BM`2janKtK3=C&ToF7B3H(>kR zk<$~%-v!`1?-Lnvq4~9lp%|Q!9Fpzq8Ty6nz_fn~m~MF95226mfY6`*fN6#;!uB9_ z2mUF7=>|)42rcObrm2~yL477rdT|4#6J`bm&=?n}{6nrwKxY<%{Dv#NfYuCP^EW8& zLHa;x0Yt<4voJo0#+Ei@7$9Sc=y@GvKeP`5(#BxH%)rnBaV(f`$qZSSs>!el%!d#S spd)`EOq84k6+)wwplcIBYuP~Q1lcW24v=&IL0Uj}*NcD{P`85E02p(HaR2}S diff --git a/media/image5.emf b/media/image5.emf deleted file mode 100644 index e4e6eb2c5f69038d9713a22873dc5ad63a7a210b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 61784 zcmZQ%U|`5$KmaRd28O*LL8#FFN(P2nM+OE3S6?><21bU6j|>d9><kPnP<a^Tz{bGP z!py*6!o<K}hom1Qe`gK{gUt;V1~&!<1|0?l1_cHN23KD<ZAJ%11{nqh1_1^J1}1?6 zw?Wz}7#J8p7^Jp<fq@|fs@A}P39JrcZ-c$O0}BHW$Z!S*1~~^-I9t|%fkA|Ufq?^L zCIbV*O-2R=E(eAN6$S<d2?hp+tFxp3gY3DyZ@=TSx%!UkBCDL#MYNn0p?Z=S7{F$M z)PVGWFatw_Ez~LoWHu861A{u$T#$N@n&{bAK@@{3k~uIo2LnSx7y|=?0aOn+0|P@I z0|SE@0|Nsq$YjP13=NDC%oo`}7{uNHH;0{pp#f$NNGZr&Ak4tf;0U%5Od!}Gw}HZN z1p@=a9B3GFI503dFfcHffWk)Lz-^G0b0C6&fgv<B)E=Y<8H1!i@dBd%|NsA=!-0|6 zgMop;2C5(AW{?~xEEoL_b-K%Z%Lzt<!WJYBqe0>fjEszp%*@Q94va`~$-n^e2M8mF zEixPArg#Ph1`CkAP#R<}h!3Jc>5>=1VEF(4Ka>TbU||L_1IA`WiU%<U1_n+B28MhF z1_pC@Jb=O<gduSNiW8V#a^gV)nifEA0L94$1_p*D@Hk;)p1{Ds&;s(Cz=7K^f1Lc; z;&jt-kpr!124)0kW@TU#abRo!<wsCH1LYNvdlMKK7((Fgr7R7h$34jW84L^zJxJ#J zFfcHH(kU$Mor7jBoM{vi)s74d4Gu6pCntr0(<`jJ0f~dcAEXo%rl9l)qU&64J2Nn1 zrb$?wfvg6lO%O&-lgMn4xv=yJQV&a)Fq%OKlHNgfhfO*OqTm>ou0Z-=WeLbUkOG)m zm>Q6{Fj88whL%~<&@$A3g@GZ08B(5r;t<3?!OXxA0nPIuGeH=XmqC~fR2H$EW!7c6 zz^uV?fmwy+0<!|kS!M;66U?A831o%>)J%M4D6oVutFQzxYp?_`>#_te8?b~h8?Zz$ zg9=ShIgIQ+2^LiMb%4yr>%LwVU6u(f8Y~l7R9GgkD6sUhD6n*}AiED_CVuycu&A&I zuxPLdu;{V~uo$q2uo$pNuwZlF4K(+8uo4PCUshd~09Fl_09F;209FMSUseSc4_0LN zfy~73zAG#$EEiZbST3;WvRq&>V7bC#z;Xkt`)07Bh93tTA@}jJ>9Pp0X|M>esjvvJ zDX{ReDX?&`A-fM`CVux#VO3$7z^cJAfmN4f0;>Vb6jlS48LZgCFM<u#eJ2RI?<|`x z%LO(KmJ4huEEm`mSkAI3u$(|~AIMDn?h9d4VF_T<U<qK;WeH$2U<qL}V2NPE<~|8_ zRQGkT6AHgxc3qYU>>4Z+*i~32uq&|ivMaE3up@^b$V~k16Jb|j5n$I~5n$J45nwl9 z5n(rAkzmK>z8h%n^WY%lK3@)9mH-Y7mH-YFmH-X~7GDkp77q?&_kqmB@4hSSDl8Y+ zHCQgN>#|&6H(<HKZoqN_tNUhfpoSj@Cn5Loa_X`OaB8p!aH_Bfa4N9yaw@QJa3Z@8 zWF~(1P2o^snZTjJGJ!*vWder*%M=a+mKhw_!Y_go)qN)jy6-HfF3SZ@4VDX>Dl8W` z6<E%4DzKbDaUaM`{O$|kRAC9=)L;qV)MW|aG++tgG+>F~#O6K;E>!n*a1jc>UM^jh z30xX16S!1ZCU7aR^l~Y%bZ{YuAIMDn?i1lsVG-ccU=iTbWf9;qU=iUmV3FX$=Dr(f z?(^U#<UU_+U6ufD4VD0I6_x;Q1r}d!1r`r(WcPv0#P7Z<Tq-OVxHMQUaOtvK;4)yj z!ezj61FQRHaHEDF2M;0l@$%@h2=HjI2=J(|2=FMd@bW0IaPT0z4`e2O_f6qeVVS_K z!7_ncmt_LC0m~F_1C|-w*upP@2i1Ki2)geqk1opv9u1ZYJSr>~cobO9@+h#JKye?) zO#JQ(;Zb1;;L%_S;L&9X;4xqc;W1!|;KAlT30_q9b?_1jzg}KlmI=HXEE9NDSSIi) zu=MgOuypVuhabpH{O%LsRbdg})nF0e)nyUjHDD3pHDHn8#pb>nXzugiBji3`K3$do zJ`I)tJ{6V#J_QzEJ_QyJK4kZS%*5}$E4(T!7kD*TF7WEIT;Mfexx#C}as#XTX7Hhg z9|u1n_wn-UvIy{Nun6$0un6!gu<-ILuyF7ryANb0e)mn`Q(>9Fr@=CTPnTr^p8?Ah zJ_D8+eAvP-f*;j=CkVRlEWa+x1%3^d3;Zf97x)!e&hjg;oIr6O$V~k13*lE`3E<aY z3E<ad3E($i3E?+jiQvcPJ_!L-_jL#m3cp?fU6u&~8Y~k8R9GemD6sSjD6n)0Acr5w zO#JQ>5l~?f5YS)|5YS~25HMg75inqp5WwcX8))wH5G3S2UqM}#06`6w06`U&06_&7 zUqJ;H4?$%2fy~73zAFMMEEfbcSS|?YvRn`_V7Ve-z;Xkt`(_BDh98FzA@}hL>9Pn2 zX|M<gsjvtLDX{PgDX?$|A-fM`CVux#5maHBAgIAIK~R@vf}jD*6hQ-)8G_itFG2{_ zeJ2RI@2rq6%LO3~mJ32EEEj|nSk4M5u$(|~AIMDn?h6r8VF?h@U<nY?WeE^6U<na2 zV2KdI<~|8wRQGiV6AHgxVO^F9!Wt|SgjHB32rIDk3M;U52qT9d$V~k16A@Nn5fIj3 z5fIj85fC<D5fL_Ekr2k_z8h%n^AI8AK3@@CmH-hAmH-hImH-h27GDts77r0*_kqmB z@4hR-Dl8X-HCQeP>#|%BHek6TY`}5@tNUh%poSlZC?WUpit4fmh-$D1h^nv%h$^t~ ziYl;hh$6cWWF~(1O%YLHnINLUGC@R_WrBzS%M=j<mKh@0!Y@J;)qN)jy6>#0F3SZ` z4VDX{Dl8X76<E%SDzKbDaUaM`{O$`8RbdGb)nEw_)ny3~HDC!5HDHMlwZ+mumk>jB zUxyf>@aq-RWtkwR!7@Qig=K=60!y!$0!xP&a`=JF#P2>4F%=d8F%1?0F<lk`F#{G6 zF#{F}F>LO;f#yCBaYF9%71w165Z7P{5LaOd5LaOF6<1*K5Jz?&$V~k1yCSB-azRXk z<${<l%LOq5mMdZgEH|*aZ-zK(_;E-Oav!gRE{lMK28)1%3X6b*0t>H%0t<%(vim@0 z;&<N^aTS&c;u<Uy#C2IFh#Rm>5jS9&A&xElA|z1VcY>h%&PwRAT#(RUxgep!azR3Y z<*bAP%Lx?sfy~73z7Po&mH-J2mH-J|mH-I@mJkU8mIw)K?vs#2bzg@hq44XK)Mc3< zslhTqQiWxLqykH?qykHaBy#wH%*5|L5lIym0Z9!O0ZCmJ0Z9WE5lI6U2}x}3yMg9D z4=F<K^Oe$N36RoY36N4@36N4?@s(0w@sL7xAIMDn?z<wX!g4`UgXMyxF3SZ;1C}e2 z1}rzQx^IRQYWQ(T6LKG~v@VN)v<8cSv<i!Wv;qsSv;qr<G_w0ZX5x3>6e$&!2~rv? z6Qp!mCP*2uOp!8RnIUD1rF@ByMs;5%LHFfK>#`I|Yp@hbtFRPGE3o8BE3jmuxDR9| ze)ok)tFQz}Yp?`J>#_t$8?b~(8?Z!3!`ug&F93}L+C%3(Kx4bcpz&S?28NxC3=G21 zF-_1IC~T|~G{*sBgT~xJ<F6o$Z@vS0%oa4RY{J0601^YuHDQ|r3JukD0L@QW%l!w> z0fE$l=9HKih?|o@AFoB9`vI8)^8@nS4@ev|_tT6t_oKtGfkB5Mf?1UVghA|~G4}%s zL(o`yi3^i6j0S}%NE}9k#Hlg&14<vTF?ASC%-j!1A1oe_=YBxqpt&E=+zV{(2R#nJ zd}#Uvr9+rGp!5k!k04A+n$%!qV31*i%ztV*K++j#UXp>~gA-_M9)dqO!NQNjfr$;4 zjzM!646C*5Kx#m42hr>d3=GZ;jto8wo(xV5K@6UtH08k5aDah<VG9ETXg&-)-w9IB z2UeTUkjIe5kjaqFP|8rmkjPNNkjVfNQ($0F$+BgzV6tPlFJcF#=NEwK2B~FG`XHEQ z5V!`W8(RN?X$K84d$9UoRS2DI1*Q+^dV=YO6~PdCMi!W6*xvx585%%E0>~Sn;Dob< zpy3U2Gbn68c@i|Q2b!w`u|Z-%3=9kfjG)+OV0Z(Pgqi}P_JA@N0|Ns)0}F#QLn1>C zLncEKLlHwJNRnjy6coe^Ah&=R0lm-JFPuNh2I7Mpop4u|0c0I$z6>OHqxU&T8N&xg z28IWz@7Ng_l2{+qgJ=eZg7Zh&cAP&7ns#B}d6HlLd<kETMs{zRW=?O}flz^SAirhY z(`8_}r_12d1`z`}S3=h%<hLTHL(OenhK~2lrJ(t9n>)G;8h3OVc62{y2Zaa2&lYg{ z0nOReGchnI+|dPN1_tI*P}vJIXT}HS(t2^oeEWZ=f^v;>_G~JX!iyN36m>)XC9&?P zcVYvn-Ql*2O~Uvv8+iV`3_O(%pN9td8#EWVfPsO53mnD_47H#+cm_yZFfi~sg@*Dv zf#jqZ7#Kil4m6(!vLA*)b59_gK_ESX%19Un1sZ6+8I)f^VxT|<*#V+K;vg{)2H642 zqr40Z4WN3UgMope22|hpx@l`WK<4*B>WImIW)4gZusLs#n?e2uVNjeqGPp7{ls>d; zXj*R9FqO+5L^Dv3reW>|nGXtMP@M}Zm*g237(ihNYBPZ3U||d@1C2oQ#!z{XpI{i| zRuB$gU|;~b6O^_<axgn!VFRj*LFEgmjzkU{Z1rWz_L<K9mpC0Yplc>TWgiG5&xInh zL16^551EZz7aB7{)@pPzLe?dK;?i8Wi@{vjn7Km&ghA{sc={u!3<jkEdaQ#0h0mT2 zAE!K<BhD}y6kZ^47!4AqMqS8E<~j(FK3JR}*M&xmpz@M|p^K4$!4$d<0zD2ue3)Kx z;sMsa0=WScC&a9Sc=>akGpH`4H9Zp7L4d*(lpaB}#lpLI*Fk{tFDS2rFmfJ8W`oqg z)<J;Spz;Y+=D=uT)<J;u!P?cJbOO?kz77H;4(l_3)T6J1cp=KbV2rd50>ocTU>(E@ z(dEofL{~FE5M9lDTXZ$^4bkPyH$)f1*FoHXnh7eCLFFaLT_6l9V?h{HKiv@3W4<k_ z&HO-AoB4^THuDQnJ?0mp#u)1$K<@dB=DuVC>mXi;rn5W|&1QKZn$2=sG@IpyXgbRc z(Pa2K2$1_gX5x3>JLcP>ubCf+zGi+R`kMKL=sV^YqMxz4Z!^+52#|Y~39N&7A*#;$ zL{yvgfv7g?ZBcF38=~s0H$;`;>mWex1DT26ed}0mi>_vQAiA36iRfyU7ozJ}UWjhS zSO)=ePchOu2oV1<LH9jpeIojr^?~SX*4v`5S#O9wXT2f%7{z@cGx57GkM*`_HtPe? zY}O~D*{m-_^H^Vq7Gtb~0J+B)X&nTJznH)}h!>*E*`A25W_uvIn(emeYPK7q%h_&- zE{3mz0EHjOO#JTCW4kS?&GtZ4o9&6HHroqPJ+>F3#u)1$K<@dB=DuVC>mXi;rn5g0 z&1Qcfn$3P&G@Jc~Xgd21(Pa2K2$1_gX5x3>JGR@Ruh|}mzGizO`kL*9=sUI-qMxz4 zZ!^+52#|Y~39N&7A*#;tL{yvOfv7geZBcEG8=~qQH$;`;>mWex1DT26ee2k7i>_vW zAiA3UiRfzf7ozLfUx;qTSO)=ePchOu2oV1<LH9l9cq00m<ALaFj@zQIIc|tP=eQyI z7{z@cGx57GkK?vzHpc_eY>p?Q*&HuK^Eh6J7Gtb~0J+B)X&nTJznH)}h!>*EIiHBG z=6oQ!n)9~kYR(&?%Q<g|E{3mz0EHjOO#JTC<Gd}Z&G|r7oAZgNHs=dbJ<b=R#u)1$ zK<@dB=DuVC>mXi;rgJ?J&E|R_n$2}vG@I*&Xgb#o(Pa2K2$1_gX5x3>JI>ppuQ?xx zzUF))`kM2F=sV6AqMxz4Z!^+52#|Y~39N&7A*#;(L{yvmfv7h3ZBcFR8=~smH$;`; z>mWex1DT26ee1Yxi>~H+AiA3CiRfys7ozL9UWjhSSO)=ePchOu2oV1<LH9l9ej@ss z`+?|d?%SfTxo?O*=e{BO7{z@cGx57GkNdW0HunS3Z0;wb+1xKg^SED#7Gtb~0J+B) zX&nTJznH)}h!>*Ed7g-_=6N8xn&-CYYMvXS%Xw~yE{3mz0EHjOO#JTC<GC%W&GSH1 zo9BtBHqQ%DJ)Re$#u)1$K<@dB=DuVC>mXi;rt>}#&E|a|n$3G#G@JK^Xgco=(Pa2K z2$1_gX5x3>JD%I3uX!GbzUFx%`kLp3=sTVlqMxz4Z!^+52#|Y~39N&7A*#;zL{yva zfv7g$ZBcE$8=~rbH$;`;>mWex1DT26ed~B{i>~H<AiA3OiRfzH7ozKUUx;qTSO)=e zPchOu2oV1<LH9l9dm{Rp?}6xRzT2X&`EH0l=er^L7{z@cGx57GkMFi<Hs1r$Y`!O= z*?ccV^Y~tf7Gtb~0J+B)X&nTJznH)}h!>*E`Jafc=6@i%n*X-wYW^Fd%lU7JE{3mz z0EHjOO#JTC<G(Gc&Hq4DoBxTZHvbDzJ^mM>#u)1$K<@dB=DuVC>mXi;rVBg~%@%kd znk{f!G+W??Xu7}+(Pa2K2$1_gX5x3>JO10EulXN{zUF@-`kMcR=sW%wqMxz4Z!^+5 z2#|Y~39N&7A*wF;L{wYwfvC3NZBcE(8=~rhH$;`;>mWex1DT26ed`2ni>?-UAi7%M ziRfy97ozI~UWjhSSO)=ePchOu2oV1<LH9iud?NZ<@PX)S!P}y*1#gHx7rY_*7{z@c zGx57GPw=*Aw%`NNY{4g@*@7=b^8{ar7Gtb~0J+B)X&nTJznH)}h!>*Eg`SA67J4AM zTIjauYM~pV%Y|-;E{3mz0EHjOO#JTC6S^&`E%ZQCTj+_Xw$KYvJ)sw(#u)1$K<@dB z=DuVC>mXi;rVBq2%@%$jnk{@=G+X$FXu9wX(Pa2K2$1_gX5x3>JE7a6uZ13nz7~2S z`da9P=sTeoqMxz4Z!^+52#|Y~MextFy%1Fwc_OMU@<3Eu<hH1`$PH0-ksG4Q@O2O% z_kqmB@4j`yw?$VAKM-9l{6uuM@C(s(!Y@QOW2}P!xu+Ou9R!H~n4tTfi#!p1E%HG0 zwa9JJ*CIDWpNrfOeT?EhkeT@1mnU*tG+X3>Xtu}`(QJ_yqIn`OM2j)jL4e$2jI<5{ z#9vHc9mEUK<)TkSSBpLnT`hWBbhYRW(dD8yL>I%?L4d*!WF~(1>51MJ)fRmqsxA6N zR9p0gsGjHxQDcmC5Fqz_Msr^>fprisMAOBdh-QmD5X~05Et)NMLo{9NhG;T;9R$dI zAT#m1@15vv(bu96L|=<O5q&NCLiC;J3(?P5-M1NO9R$d|$^_Oyybx6ve<G?a{y<b) z{I;mJ_zh8Y@f)Jb@O2O%_kqmB@4j_nw?$WrJrG?j_C$2G*bC8hVlPBDW2}P!xu+Ou z9R!H~n4tTfi$4*4E&f3CwfJq(*Wx!spNroReT?EhkeT@1mnVK(G+X?EXtwwh(QNS- zqIu#kM2j)jL4e$2jI<5{#9vHc9mEUK<q}UsS4%t)T`h52bhX3{(d801L>I%?L4d*! zWF~(1=}Fuc)s}c5sx9$ER9oVOsGh_NQDcmC5Fqz_Msr^>fprisMAIdoh-OPZ5Y3jn zEt)NPLo{9ThG;T;9R$dIAT#m1@14YL(bp0WL|;oh5q&N3LiC-)3(?P5-M1NO9R$d| z$^_Oyybx8FdLpVV^*~fx>b9u1)D2N}sT-oo@O2O%_kqmB@4j`Cw?$V=J`i0k`9yTJ z<O|Vtk}pIzW2}P!xu+Ou9R!H~n4tTfOFa>NE%iY3wbX6V*HSk`pG(~keT?EhkeT@1 zmnU^wG+XL{XtvZ7(QK&~qIps;M2j)jL4e$2jI<5{#9vHc9mEUK<<d_?S4%$-T`hfE zbhY#i(dE)NL>I%?L4d*!WF~(1=}F%f)s}uBsxAFQR9pImsGjr-QDdCzAYvF97z`O0 z7!nvEdv0N4nxHuz*f=|AjuFNNjk$xyUqP6dIcLz=C}^A=G+qfBdk4+&V4K%b66*)g z>)4>Jg8+@Qg6sle<Z)hPHpmY2@mlnC5Fm44en6i4k%P|t%tM;{c`Vq)@L158`HmzA zgV;l3?gtcxpt1Cgch7<6en2#6&Icq8qe1f2nEL^RIc!WFMuTQwVS7i>ro-WLXCQsB zctD=}0j)=1XJBAhfHe1m9tR*kOfM)M!q}kn2}&OzOiG%(!N9<920AB;ZypvFexP|+ z(4JY)UQy6^J1CEUFlf%#gCU=x7`%=lk0G5wfx(#}n8B5SVah*ShWQzG3}3VCKy*XY zVld5+dK64I{CWhY89sam(+zip>_O@rB-Ful!(Ib0%@FJkrVrFcgK1ndybKJ)tXqJE z8_4aTIbP7-UtLB920;b}hCW8fdL@t?Y>pQs2MSw|KS6WApg9K^289C%gZ9W{4}<>< zpfmx}3!2vl#W84p6~qV4qa(9HX2RS?&fIX`PGOhp?av%QbHkC*rcNL?gD`Sgfy_ou zi@3@MKPJeW<Ps*toaB3z5{CCGp3L@IAPi!cz|%K5=@L{v(qnEI6h5IkK~A54Yq-E@ zP<VmFVKhj5FqRL#Opx;lmN7xr7J||ZdK`fGu=GPtJb>ya&>96$x&Xz=8wLi32Sk() zu<*lJC)M{DwEPg1tic$R_OY##0<HZ5oi_o>N1%KM!l1ko!jQ;N#E{OA%22|P3Oa>i zv$P#Upu8P}YA~2?xYPos8CJ}I(D|Do^xpFj`t&0RE%_fpGmyX52^KaWw;`{4`ixf4 zPXH+ZugRg!x~CT;t$P9mdjvzrIeYM$C(xQHafU92dCUw9$m^aioU{k8rD`~5&lYl9 zmtpaP{Bn>U@Tnc3%H^Cr+nn3F3{C!G<&Y5o28NjdV&xyM&;Pt8lFI?4wt;a{8S=WP zjN7`P)kzK_&vY3IiX_TY8dtUa`~UwxNS~WbUl~Zxj(R6H(7GqkDkc#7%57Z+UyHsn zkXfL*GzG`HC(t^gL?+0(rhX;{@cAW>V27-G0?C2aJ%Q2?uJSqte4YYo`U1@#gD@y> zfoM>A1+6Iq(V&oo<t<p*jGRA^*X`h|OJR8hRF|#+)%R%Y13~%EjUkgEl_7^Ag+YPA zg&~!pj3JXDnIV;d!Df|h!<)%=45^%UV7gHmLd(WLXv;DP%`g*8H{4kYrB6U;t)~$B z&Ob2i@RijbWRAlhK`@Q0RwbuSox;Gt5Xr>AAjiPKFoOwl<_vNif#kHHYYcJ45vWeZ z6&9fQ0o7TcxIv~taSjrL$%ANYakqzofdRDk1=Jo#jyur#DxmfNs7wN_^#s-3ApIMn z<Xk{&U}#N`#5FLWFa@>CLG<mSJ9yW?fZ`g|rU7B(whS^GRDZ$Nz<|`l+UGEum^CmU zeXu?i$UIOQKwkp`5{LB{L2UFjF!R+>*T8`Igx0{!S6|LNM}0N(boJHDlhs!<_p2{w z?pH^wf$4{uiLVdbudc^DSzViXy1F*=9CdBx`RaPi^VKoez<}HXTCW0H(+DcNL3~1M zVCJi*v&>P?W|^*@%`#a%o26epouywLu?7a@K9HIC-S>`pvifW0>FTeU=cvDCp0ECn zdA>U48W@m!K<ibI-A8B*%zSlq);a3htkc!CStqM&v-Yd2v-Yba*1&+=2Qm}C`_{2c zR$t9BU41pn9QD;K^VQd}%vZ-;0|Rm&XuS%u`v|RpnXmqwb&mRL*6Hf6StqN%X6;vh z&f2ezSOWucAIMDn?#pAHte(v}T|Jw1j(RrheDyrm`RbT!U_kBztye*IAE7lc^VOHL z%~4;?HeG!++hq0CZ2juX+4|KHYhXa`1DT26eR^z@)wS8Ct825(QP*ahudc^7UmbG| z49I<;^(x5jBeVu)zIr<Q9QADW>FU|+lhw1?`_<Fg`_&O^U_kBznTg+h@7N}*zh;}R z{+ex$`fIlN>hIX*t7EQ#0l5#fUIp2G$^_P!%vV?En4_-EF<o7oW3sw7N58r{N548^ z4GhSAAT#m1Zyoz&_0{at)mO96QD4nIUws|>e09t<Fd+AV)~g`9kI)*J`RdO(=BU5s zn6CbsW3u{dj(+v$9R2EuH83Fefy~73zC4b}>e(FA)w4O~sAqG`SI^^^ua3C}2IM}_ zdKF~%5n2N?Uwt{}9QD<l)74jVPF7#d*{{BwvtJ#t1_tClkeT@1r^h*2U7K^dx;Ez= zb#2c1>Ux~>)iKw=fZPXKuY&A8LTg~=tEY3#QP1X@uAa>`Sv{MpUp<|xUmdXq2IM}F znfTrJj&rj5YtHHFuQ}(azvi5;{*H6LI_4S}ko!RERgm3BXbsGKb#?AJ>e}4X)wQ`N zt7~)jtE+SOt0UIHfZPW%6Tkb`aZOfV%{5(pHP;;V)m-z{*Ky5P$6Nygavx~D3bOkM zt$~@Z{+xS``fKj#>aV#ctH0*%SAWjkuZ~y)19Bh8O#JT4<DRUZ%{^T`n|qFWHurq> zJns4Gm}_7_?gOn?L3SUZH8Atlm-Ea~U(GXJeKpTy_0>H6>dSfh)e&o8K<)#XiQj#C zJd@S6d8Vst^UP7#=9#aq$1`6Ya}5m0eW3L!$nGPw24=o`I`16yY~JbW*}Rk0vw8c~ z(|P;V5o=&T?gN>L-+k|RCab^ZnXdktXO8-7p84wUc;>5Pu7Lr$542td*?ol8z|2=y z=bNLh%{N_Ln{TqZHebKGI$ys!Vhs$)eIPUOyKf!uWcAg&)74k=&QV{@J70Yr?|gO4 zH83Fef!3=ayN}QsnEC3@`R1s<=9{kmns2iDYrcN<=Y0L@h&3=E_kqmB@4h^~$?DmB z)77*2=BQ`$%~#Lko3D<!1_tCl(0UbQ_YqnHGhcl<{~Yzz{L|G}^G{Y^&EK!SoWEZk zu?7a@K9HIC-KWPtSzVidy1F+19CdB}`RaQ7^VKoez<}HbTCalaK0<3?=BuX*%u&x4 zn692JFj+lYpkF;*pkF;1z6J*5K9HIC-S>`vvifWO>FTff=cvEtpRfLof4(~A8W@oK zK<ibI-A8B*%zSlq!8z*Mg45Nt1t+U(3-+t43-+rc*1&+=2Qm}C`_>6eR$nbJU46B{ z9QD-#^VQc0%vZ-;0|Rm&XuS%u`v|RpnXmp_aE|(G!RhL+1t+V&7VKAlF4(V*SOWuc zAIMDn?#mOLte!16T|HZHj(WD>eDyrR`RbT!U_kBztye*IAE7lc^VOFN%~4-1G+lkQ z&}8-1LjCH?h5FSIYhXa`1DT26eR@KZ)wPADt7{9*QP&oludXLFUmbG|49I<;^(x5j zBeVu)zIwXw9QADB>FU|Slhw0@`_<Eh`_&O^U_kBznTg+h?}R3+zZROV{#s~``fH*2 z>hFZ+t7EQ#0l5#fUIp2Ggx0{!S63IAqpmG7U0qvbvbwfNzq-0ezdB+K49I;TGx57` zo$zG!)xy)&R}0TkUoAXeeVy=pb<8y|AoqdRt023N&>EQe>d!^ysJ|AOuKrqNvifV0 ze)Z=f{pyG{Fd+AV%*5}$Jdw%j*&@@`vqk2pXN$~N&l8!ij=2T~<UY`P6=e4jS_3m* zeYxly_0^)&)mMv7R$ndJufANgUmdXq2IM}FnfTqOCpuYOTXed*w&)ynZPEGadZP2y zG1tI=+y`2(g6uv*YhdQ9r;E)|&la1mo-H<6JzK0_JzcC{9kB)m<UWv@_}%wTbh7$u z(dp{1Mdzr$7M-vDPISIH<{B7~`#|eekljaU4a|IXb@4gs+TzpIwZ$i^Ym4`*tBd!m zBi6ux+y^ofzx&pSO;%qmHeG$S*c|oMV)ND4iOpBXTmu7gA85S_vik_Fftj!VTzroD zYw_vouf->;zZUOTe=gpyj#vW&av#V{{O-#WpRArOK3zRqe2#jy_<Z#|@%ieQYhXa` z1Fcs<b|0ZNF!R-yOUzMUEiqkvwZvrg)e`;c%O(2N5o=&T?gN>L-+g)#lhw5)rmJg9 z%u&~tn6IuUF<%{X4GhSAp!F)q?jy7YX1;p5<Q(;E$?59Zl9Sc5CHvLWCHvJ8YhXa` z1DT26eeWbDtG||*uKrqLj{0kf`ReZ^=Bs0_fdRP>v|a_-eT3G)%vV>Jnxn2QHC<g> zYO=bvRKL2qRKGf64GhSAAT#m1Z=K|1_0^Ko)mKZ-QC}@NUwxhAe09t<Fd+AV)~g`9 z?=gWjF!R-)OU+S#Ej3;JwbW$w*HZoJ&!zg+5o=&T?gN>L-+g&flhw1OrmJU5%~8*m zny;QGHD4Wb4GhSAp!F)q?&~M824=qcWa&BT)1{}YPnVvoK3%$BeX?}FdOv&(49I;T zGx57mPkOStw)Av$ZRt7c+S2pY^`z&k<6Z+(&IDNlQ^Ul-u$u;Ffq=$RLGy`(*1(*} z;Bx`3({Mmr0|Odc1&#NDF!DGrG8?1@eY`dr?HqWJ8rU2T@){URCdmHhT}+7m&$E@g z7-lOQGf&Y5VGw(0tbqZAA!sapijSTPj0S}%NE}9k#HlgI4T@LTm^zFG&D+7|OwguA z;cEmy`e5;ZyavVsy4GMf(pm%bH~{fsdMTOX2Dt&0CVwz6Fo5RqK=VNO=IvnNhcU-Z z<XIrFIVI#dZqWJ<(76B#4EYR2h&3||f#4H88cgRv=&MJ;G=suT2;IO8KDpz-Dj_h< z5Fi7l8=e}0X$Jv!FpX<AkGM55xaPa*ea;8v^WBRWKyxlc&Ub_FaRAMO<C*Vv1kGK8 z=BPn)Ca`lpp!401w3zP(%|!-6*MBU)GT$A<1i4oOl%8<Sr6xenpg>P+p!sId86KcH zZ_t_~(A+7E4Kfcj?*+?muzBwW1_p)_=(-T(xl>~D4`|-ofdNv^BIgCr+^`J;gTq5x zd?$Dimv&+91(^w2-vz?%ObiUN3=9nZ&@vt*2V36-k^|ib0usX&exNfvKxb%S3lGp- zH|Ts5P#Ho_c!1moI^P62JV51>BSSEQ9|OYzSIFrmt<%6X!|i<#8pmoD^1=v|J_4X& zRDdOnK<N(@Mj&_L3L}s|AZ}jm3`$q@PCxn#4Fcb35H=uxl|aJ=)J6ieV?b#ImVQ8T zps)dn;R+j2`q2j^9tH+@JqXKBv`arO41Np^cX`35;yCP32h#`UI)Q1*>Id{Z21-BG z&@h^hCH;WH4HQO%(+|ka3=N?418YaX?1F_Ct;!!ehK3z+Gzc3|`dI`Gn^joC1|$ax z8$#&^eCQaK^aCqT(aRs?b>>d%ios`)J(!j2WNPl@JmF}PV^;7cCs;iXY8!*v*C34C zu102q)S$Pqi`RjVyn?4`kQ!KgA-AzXYa<RZFfe#AK+awR)iK+dRd}{DZx@`!0>U7+ z3J**#Ic+;odyZP`NbQ#7fbXsWmCK-VAG8(-<YrJ7R#KbnRJx(p8AOA^5*DT)8YT{+ z>Cwi{SprKHAeSM^7EnHeg(Y$u+lqmK0dy{%Hv<EMEF)x1DRTJ3;sd6aoOpnxDUcgL zaRMqYL1Livi7icD&Rgva3de?{Nsj7_D$bxZ2*Su|51Eae#*o>_=`D<rfdQ1>(ij;S z(xLv$6IJ2K6HO5d6a!%pduXJ$|1F!G^<*|XgJ@7V!NLnf!^A=KU`%hJjF9vOih~Sj zJRpZZEIz22-az+Qf$9iQdZXmNHCP#d>;5X_xB!Jc`n_79Gz`MXX&0FdO1pU1sWC8u z_YQz^HnI6U9C~gls3QZ)=aGyI3`d~n(`m3!p5{UM7*sdI@-}kYg&JWED=R?dEyxa# z-^GoWI)5nga0aD!P?&@GmA|c>2UD1X!o`!3fngVD-76yl!zl&^29W!gi*)dS%AMsR z2e_%3#zA{<K<ONo#zE~)P&)t=ZlEwD=e{<4=^YgIOBQs4>pT#RE$l&I07@I6bPY=P zAdH;ek=Y<Mu(S_i!^V$bH1ZlvTxlPq57r(5g*C|EFtxC-28rWaqnRhlz)*{Hj=?_> z2p`}0>MxO6!EYj!g5N|+1;2?D2>ueu75pcX3qQvIWM(dbvk;0!a|O#p3k1tVO9jhB zD+P;1YX$Q}Ycb9-SO;|vYz)~B%E#wEE0J13Gm%O`Gm%n3Gm!#8E0J75J0$mk%p~N# z%_6yi+e8Wkw~3SrZWE~#+$>TnxK0GqeeZ-J;RSPF9h8sHeO1D>f@Q*$f@Q*`f@Q)5 zf>pw~f_1`(@B^7i$bFxMa|OQ%7YKe6E*1PHTq*cjxK{9;FsA$TpzeXWZ=Vpvz4+X> zOQ=?Gn^2|THlb3%Z9)ZtyM%HD_X#1~2Qrh8`;0;U5iSrk6D}1r6Rs3A7OoZ4!{WX? zsC!`U`zJ`)eZK^21-}Va3VstT75pYxAoxo#SMZ-8!hIk!3AwLWC|9sds6enxs8p~_ zs8X<4s8%pf2s8ZFLEQs$pB<EsFZ`?oYX!{&D+SF2O9jmY3k0nMa|P{?+y^p~koz_Z z<_c~TED+o#SSq+puu^cdV6EUfK}`3(6M%#l%zbrGK0fzV3DgRf2~-M}36u(!2^0uc z3FHda2_V7`WF{f^eHO?S{3cK!_)VZx@S8xT;Aeqa!FK|f?$d+12j;$g{1ErzbKfrh zTET7nm4e&&O9i*_7YOd+&lTLqk8mHzOhWE62Kh&zK+sH}RM1SIQqWkSR!|R%`|_af zfw}J=A7S_X;;R+>##br$jjvSj8()FoFTPyCe|!k{fy^Z2zGD7d!7}~=!7~0*!7~0z z!D9Ye!90G<@LLCU56pdbP(Hr!v*N22G~=rjG~+83G~+7}wBpMZv_o<q$V@`++sv0M zxQ(wsa2sE#;5NQW!OeWNg6sG&-S>_c5?(O()j|3A+*ie0D_F)`DOko^Dp<x_AXvql zD_F;i2tSaSgxvR;H&^f*Z-L-9-crGDyp@8Vd20pV@nX7959%J6`}Xlb+>6hByLf5^ zxA9a8ZsREx+{RNNxQi!Oa32rCeIPRlxz8BnAKn5%Gu~1`Gu}!;W8PXpJuL3agSrRi zzJJ_=-S>;TR`45lrQkR2Qo(QB1%ki0a|Qo#BisivlaTw0d2$8IcnSo|cuED!cq#>p zd1?jocre3n9n?KA_t`=D_`=VMyH?PQyHe1MyHwDOyFk#2J6F&S$$cO*3At}Gcdp<z z?gGJW+@*rsxGM!WbJq&4<HmH~J1$6g!Q58|<>PZ-6<4ib8CRuX8CR)b8CQW|6<4lc z9Ty_}KxPth-)F8|!Eamzg5S7G1;24s3V!CQ6@15q={`NEdtmO{#|d#SKKJe7tQFkG zSt+=Uvs7>!XMx}@&RoHLoCx=U%p~MKV~~Hi3Ixr#N(IfhDg}+XY6bPMxGxXt9+><7 zaS(RjFOFKlZyc3^-#AJIzi|`@{^H0L{KtWCAIMBX?kncZ6)fW{5G>;?6)fYd6fEYf z70lzr48L_y_rTm|2j$}nKP!$}K{Jj@K{Jk0K{Jj5K`V}2K|3V(fy^Z2zReuDg4;L> z1h;XN3U1@56x_^FE4YpW(|w>*^^x1pb?k)0uZq1^u#CM@u#CM_u#CMxu!=obu#O!O zejqamx$iT3uHZNJ0>N+WrGnqsD+NEZ*9yL4$8?__)IG59+s8)OeY@Cd1-G$P3T|U7 z72L*FAh?SyS8yL2!hIk!3AxW0<RA6|K{NJJK{NJBL1Xq>K|L()%Y(WH=DvTdgx&Xx zwN~&OYo*{f)>6T5tObI<SaSvcu_D|DGLw+|irI1n%h(D8%h*Z<%h)Ofi`i-g^Vl%M zZynS<F!$L(`FPVGYptLeYo(wWYpI|aYk{B@Yp$RjlKVhr5^~>W)?C4DtObJGSW5-B zu~rIhW~~)m$BOB`cPx<bg1K)Nl#kDSQ(0;SC$UrtPGTt)oWxQfIF%(=a25+9{6J<B za^Gi`T)}TF1%lsLN(H~MR0@7(sTF+3f^Z*b%owy66?CBn=xzvi1_lOEMg|7Zc#ISc z*4Tjh!l1F%DGUq@u(?QDjmHRzu5min)Bzt00P&ml^-(+?1M&l`{|}>)*OS2d_Mm<~ z2*djLAbl`4XsjDF1_m070FB-AGeUN(%QHg8V-i^f1!u983MR7N5QOQWWQ-eRHz?de zV==TIa|Dh5ZquCOtU6W31w>;Tg8_}XfH3k{3o;wzUcBQjM2tCt%z%X*EWAN>CNnZH zm@_gkfaXK37#YBKvIL5?39G5M3B%M=BdqC>#@)*$U8cCthle$Yf0KLWpiAQ^ObiSL z&@gv^rtvtnm*6muQ&Xa9xWmR~L1T{C=5b)@5;TufV(|t(w+I@81EmiTMox>!Y*3m) zAIn3ZTLhT{OGn6aJw;3m3>J(G42?_-4C|qD44^cprv6-tQv-x4PlKR5PLH`oYXt?D z%jVaeK{P0j!@?9q!^A-}DDO8iGc!{%=Ku<GSUC%$$tiEc7#J8p^Vfw;ko@1o#K5ot z8V|_f4~q|298#k!p!Ya9=!^o;TpOq?2GO8+K#v1Z-2)m22c=g~ng?Ozw2sUM#R055 z2C0X|1B@nS92}$%mUlqrf$BzBT?q?okT||^@agId3^_>WZK^~0_}Wp*>N#Ta>KS74 z>M3IK>Iq`X>M>&K>M`*1KtX24h(YRKP}u=;7YKvaIe{?fY>qkVF=F%86U64Lr-;p0 z&k&oVo+CD0JqP2w&FgBY?n{UA@wqQqEk`U~Eki6`Ek!I|EkP_<Ek-O|4dFhJnS|VT zM=eI|zFLCVeYF&^`)V0tchqvkuB&0XPaNtVSUYsND#X3`+_zXYM{K@ohS+@76tVfL z31W*?W5kxLBHRZulaTvl)MCWs)e^+y)l$Ud)iT6n)N;hcvA8cB>K>T;o~sac-(!^= zvHL0+V)s>2#O|vkh&@(`5qqwJa39D_Lhg%EjS-7iO%RJ$O%aP%%@B)G%@GS%#SFjc zQ1`&xrw--g3qNI*95H#73^93?6ft>~1Tkfm7%_Du_kqkL<i0s7F=F#o62#`Kq=?N| z$q<{Pk|Q=<1=D@kl_B8;b6+}?kI#L{$~j{3${Awu$|+*;$_Zl0$}wW;%82j-nMuff zca&qq?kgvV-B(T#yRV!fc1Jl!?7A|h`^2H{fw^zF62!gu+_zXMM{K@QhS+?i6tVeA z31W+tV#Jm!A>0QtlaTvllw-u?l@r9|l~cszl{3U-lyk(yvA8cB>K>T;o+}b|-($rb zvHOY{V)qqO#O^C5h&@(}5qqwPa39D_Lhg%EiV=%fN)U@zN)d}!$`FfD$`K1!!VJIZ zQ1`&xrw--g3qNJW95H#t3^94d6ft?l1TkgB7%_Du_kqkL<i0tIF=F!-6U62#rijf~ z%n+NSm?Jh_5z~Fw6(HdSb6+}?kI#L{3OQo&3K?SY3Mpdo3JGG#3Nd2o3W)FnnMuff zcNAj8?kgmS-B(BvyRVQTc1Iyc?79M``^2H{fw^zFJjA{D+_zXhM{K@)hS+@h6tVg8 z31W-oW5kxrBisivlaTvl6k^2W6%xec6;j0H6*9zR6mrDGvA8cB>K>T;p34z--($HP zvHNlvV)x}z#O})_h&`5z5qmC&a39D_Lhg%^j}eQPPY{cjPZ5ik&k&1|&k+lk#|*#e zQ1`&xrw--g3qNJK95H#h3^94R6ft?Z1Tkf~7%_Du_kqkL<i0s_F=F%O62#`qrHIX! z%MhC*mm@Y^4%2<tWg+1Ob6+}?kI#L{vN>Y$vKeCWvMFNmvI%0zvN2-mvWV~lnMuff zcVuJ4?#m{K-Iq-fyDys|c1Jcx?7A$b`^2H{fw^zF48*<o+_zXJM{K@KhS+?W6tVd- z31W+7V#JoqAlwHslaTvlWMjnSWfR2YWmClDWi!NNWOKyCvA8cB>K>T;o=X#U-(%?< zvHQ{)V)vy}#O_Nch&`5$5qmC;a39D_Lhg%^i4lvJNf3*dNfC>e$q<W?$q@^e!3@9Y zQ1`&xrw--g3qNJ)95H$63^94>6ft?}1Tkgl7%_Du_kqkL<i0u5F=F$j6U63Ar-;p$ z&Jdd;og+3~8q<B(r6A!2b6+}?kI#L{QaNJrQW;|LQYm8bQVC+oQZZubQi$*anMuff zccfy(?n@<z-Iq!cyDya?c1J2l?79@D`^2H{fw^zFB*eY=+_zXVM{K@ihS+?`6tVe| z31W*SW5kwABHRZulaTvlq+-P6r4q#CrBcM?r82~1q;kZ>vA8cB>K>T;o=XsR-(!g! zvHKDkV)rFd#O_NZh&`5w5qmCya39D_Lhg%^j1h~MOc0BgOc9Hh%n*x_%n=Kh#0<ab zQ1`&xrw--g3qNIv95H!`3^93$6ft>;1Tkfa7%_Du_kqkL<i0r)F=F#262#_9q=?Oz z$Pk+&ks~%;0@Hoh#UbGZb6+}?kI#L{;yGgR;u&J`;wfVB;t68O;xS_B;)w7AnMuff zcf@1F?u#dg-4{<0yDy$0c1Ju%?7BFn`^2H{fw^zF7{tB!+_zXPM{K@WhS+?u6tVeY z31W-IV#Jn<A>0QtlaTvl#AC$d#S_Hj#Z$!O#WTcY#B;>NvA8cB>K>T;0-=0-?(-GP z5%Uzw5c3pE5%UyF5c3s_5er0eAIMBX?u!wN5sMc~5Q`T}5sMeg5Q`DZ5epYXgdh4i zJ!lLwg^_^)v|k~U2IKUgzB*_ui5_E^yASMe4*0hoylxmYRsrJkSZ$+t3=`xB*!TpD zCT83Sqz^V80UI|4jg^4HJdTlpp_q|@ArCr+DJjkXUZ*W7enJeUhm!FkklmngpToew z0NRTQ8pEW<{0J!hfX2Q+>n=fO#e&8+Kx20qO*@>e7pS|y=#wu`JICHqaskoU#*9E? zL?DbjHiXOujo;uMCn93p9ux+!u!My_Xl*lS4`V(f0|RJp;Vec529Q5EH3Y?9YJzZ` z<aUiZNtixr!~y8+UC@3gNE|RSV+%t`J7t&U?B~Jbpr9}V@n4@l;S8cd;tY(8jUo<= z4WK=kAoqgSu7bi3gptDynGFg<m_I;l*mxLd-wjM0Hm(c`mj)&VhKY;}482SY4D+Gk zazW#vB&SB5<OK~WNe~;R4-_ug%mW>t4000)<2#$5UTG6FZuzV~&iQ}KL1!2}{Y90t z%g^o3AbPN+O;Fizmw|zym63trF9RfP28zApHIxA1_52Lt>-mx60LCUZ+(G3JY^)X( z2gIaJP&ukKsR3NBg2D{Mzq6*q8AOA`>5(>585tP9FfcF_f#%tuX;V^MSRhbrJ-?*5 zH$R9C3kzzbP2{-`eEWPgW*&1+^|x`xwND;YK7uf4pE0(x;6ZEHp<~71{c51R3Btw< z3=@)V8Gfy|BW>Rz$SyJHIn$tdcvyUc%nV{+U?^Y&)m#h===<7fd5-&up6BeaeeH}4 z4f_-B>VoG=HL`olG;?~(c0>le2f6jlU0sGVcR}Z<gM0xw#~maFIxAhAVG+Yt=sE5n z*(Hn-40z6Q2XE3Nu&><-&%SmiTI_2F?Tehk$iQ%!fq`KTBLl-L21s1M_SJ&qo<YSx z`x`+1gkjM90SJTY5o4$zEWPtGFf@SjGH4wH=&X29JwxoiY*_jQ?NbM>9{|-&pd;Er z=>>#A^@bjU0s}(|za2O=R$4)59J{fxot+MHE^?ZLxf^6YC`>?YV$gj&pm14?C0syq zpl|`X1z)&;+zH#W2(tqgHpuNya>54WPEhzDhYhHG;mi=q;KIPbmk0?J_IVKc_!S6^ zBb2c3Stk@upgqScpy}r{mT&^efx-#oE?nUR@(0w-450H5sJZ7DIW6HT*Ay5U7PHuc zQxeXw0i|Wo+7eRFTp-4N8*sVmV8CrpS-A>JU$8U`3Rh76eGSdqOwe)`IdA_XB5y<U zAAEl?t<!HVLpnn)1H%(uJ8+oDc7y2#_sw9Mx?u!Lzo5Jf3ZtXYdK?sfurLD2fx?JT z`h~ig0n`?z=9vq`q@NOohNAB@2pdrPInKzy01BHkSi%M*2MQZdc;U+1pt=E+XF%l$ zEPc{C{rEE^F=R0?uyEOf(~pZ9m_D%1224{w{ebrQfx_q|mM{Xzfx?JT`hmI`yw?;| z24V{@TGgd?pt|&l8zgj8Vjwh*l91fG^c6H6eZdk&AURMN5vof;?gX8agDq@8`)hZQ zcpeUN-U6NP1G@hRxh@5*9W7!=WhiFIXDDST0^k4Qa55DfJ`O8Oz%;|B76|Rt3!%Ga zfa!$&iy^fBYA}7kWDA(amHNmDS5Uj^Cp28`nHU(*%Xg3*C|p7Qz?DBieJyl9g8BuZ za0clEr9}`1iGldo!k(OZ@pac4r_iku&Y(6Pu6o%BTrYy|qQezx<h5Bq<ytHQ1H(cF z2GET@44`xaD#Ku9K1gm05%r=GC@`>`1wyOv(1WyiL3jD#$erYeM>;e-G8q^!!UH5n zOnB(w2oD}m;4(5WkkSW0P9LEA5kdRtk@F@$0|Nu3&8WZtO235+rQn=e!l1yA20qJ; z0n{s)pJCUqrwekgVa-7Z{pTx$2DSM>^3B5F`wSiSX@F@4O?xnXU~(v!Za9|(q3f!_ z^nxcXVA^4OCzyU<IRQdf&IZ%eO{<_je-1QmK4OU*kQ^v(K;eNakAu_@2rGEI8#E3B z>aT$EJE#l*<$Vwau|fGCBo2}Xts4W0gQ6V0UZ++1S73PXauI<rCbylAoZfJiM>Y%% zdzKThpPX_WR33rGkwE3qA1rYUk^{vtC>!C5V^BK_S34coJzMz3kdVUzRL>NEBAS5# zJ{|;02aq;z2?M0<(h#!=95xQ=hr#rN!n0s{LCrld&9LYxgg*2cOecK*2d1f;UqE#@ zXp9mRmL80lWf@2g6qX?O;|fbqorvl;26($3)V>Gl1@%$so&N0@7&w_6Xj310F+%FY zAS_`9k^_Yqq4Wnk1&JEvLC){(&b*=Bc-sdiG;AM~GcquM_Nz27GBB8-^_xL*Mo=+a zX$X`bp<}2R{bq8?M`FT*mhFQ^Xm~VZ2@jAQG2wx$eLzn6gd85Y$|paDeDH0^X$+O1 z9uBlUzz{SAT>mo!LE8h*??U*sAHnp2!>r(P>42~#n5KUD)CLX9omj#WBnJvhP#J?O zZGp-sG{3?7jUaun`k9*J5Xj+;tA0#oVA!cdgD?Ztk9(kDb{I>Tf#g78MyPyBhSXsg z`SAh+<a{Pl+Na3j0h-GO^&gSjr=YOUU`S*D-Nc>B06OtCk3oUqz+n?`_%!HwL+E+& zVA_GR3_|m_g6Rco`oXkA{S*kje?FLA@MRU4rf!-9xg9k21uE}^nJ~*ckQ^v{L4LxO zCPCw9nEqt|w<|$yM^Ie}(hp*T(kF-y!k{RjSAAi_;Bb6B4Z;tUK1G=z^@S{!@B_(# z!jDk;q-OgKIep?PA5q&l4(YofVN-M(OfRUp3Z@g<pMmKEYu-ZWGrz&KKqE5^+9II# zn>;iuv#^9ENDdU1pmGjZS_GAksD7h;`wcm~ag~pD3<-Q}Gzc?L`pbrfSuvI{1IdBH zj8OWcX8SGOOx<P6ibZ(aZ>Es;TW=+W^U1LC1LQwYSb*>nCI*H8Mh1p8OpvoDL2|J1 z9grMoO#?^_R~iDf-%LS;6P3nyhzSp9`;8{yu?`v@8?b~2NRF8Bz}0>ur~X6^4_x)9 zGebT@9zz;KCPO-S{56#UJf_oI2^rG?)7$MBK;bp%37Bq}^AAijNOIbP#2xfx!8F56 zV+dX81fi)qeg>*PH$%ghi5WA!f#g8p3#$Kcr8iLhiN(L*`V&-7f-q>z1ypx}%mML1 zWgsYt!qPu%UWJ_g1#*1gD!&RK`BnEZjq)q#Y|^z%3=H+qz7=wQt%i!>3O`VOEnsjc z!WJGk7#J8pV~C`*?~ua-w!am*eFtjCfNri&WXNSmWhh}tWhi1O2K6%fh3ptWA>^L| zrW>C3L+Il>AoQm{V47izusulKfq#l%y1~*MLQA?q=#yb!8dpn?oN*@5{1GUxgTk4a z88e(ga-eVq`3+Y%gVHHBe}nXZ(j$lljgf$87#~D~#tyN?4LN;3<ha4rw#jEmV^Cly zVaQ+rwZ0GJC4fWoz`HUq&G4%cOfNXo2BsN4^@8aH^_gJ$z>&pZ8dvC(H_i@f+psY+ zFo43}0!#RV<UrvM3NKvY4{F<>`VG>?hLsH<y`ZuI6#m%4n^t9mFSu+ta8iW^YZyTF zHE0|LRE|!EmIKIT!(^x!t}p|Y4ZaLAF7yl!BL;@^UUswzkF87$450AX%f!Hd9v&b$ zV#33S!A%=mcp%@!L+qL)<opPlOIrgn7-_5+G*;@%puphBP{2^Yki(G4kj#(>9+?5v z?+wc*K*DM6O)%Z?{0*2spv-R%3crRvRWR-F(;7@O9B~EH2m1WMbi>R<2+dgrrWLfB zz;pwDJB0S11g5E*mqBaT_e0~sh#4~;KysjX0QntPy3Al;V89(N3=Dz{kh9@Ib26Yj z4Z@)MAA~{WDJYMF@;itRk^==hdRqWim!sEx*v<|CoiAJye835GcF32XHt@4UK=bmT zwbLMsyp|i84N{}d0J#GP#0I$q{p=8sILv*pHQu0g`=E2;LG=pgoOn=M5agdcQD(M0 z(eE6AVjv7+Gqb_;g4WW)*u<_e2F(kB=F&j%1_}#m>^lIhy#w{xLHiCsZU*@ow6@zi zgCD#u85EYVFa^;taS#n!<4x(=A)qxSu)QBJ8nk*7l;%Kgft^1AVuLU&%s~2JY|tJA z*x4bVbK>I|Ann(Q(6omf{;>Ff=_Mx~U~7LtZUDszJ<e?EYL#(WP_fU+@#l7D8;1i< zps+_jF9ejfK^QqrBeOwimlk_JKz4%m+kn;_fX-}6f}Rtvr2d7KL7a)AG>;zEptb|3 zE`+3i?0Y^c5ASe(x8;lzC>?{+@6WwEoH>tec7lmxTUQUW2NXsi|9~)Z*den)YS7CG zSUQEJE07v&`#4}_254UhXzhI@bnQK8eFA9ziKKWMTc8*-n}qm$RuCIz9w?n+Gmn(A z1J(zCgdGDDs7wcyt)RRQ%3GjyULZO&G!(QH2fUUX<PQ)Ai9=~e28IR)m>$r684d?V zW{`grK=Cec;5Jkp!^@xRoa29SfzQ4I(V%drdYTntWB|3*LGFXa0f-I4u&@K=Qy3fM zHdr`<*r5AlK=qI`17v*dfhYsR3JwMa*#5!*F$f>DmKrt}1~MD8W*me;ZPpO66&w*_ zYd9jrHgH6UZRH3N+rbeawu1v^2FT1E9Qe<#xh=Yb<A&%~jvJyIIBtlp;kYfjg5!bc z3JzNa$eoff_bq_B2WGZ_IAQmRh_B#~5MRR~A-;h_LVPQSi1-c;0da);KxPth-)ylR z95ckWa?B9hz%fH?4aaP;6&wr1Fx{5`bq~ya7odE6;de!R1;-8XH5@m@H*nk#-^y`C zd<Vw`B=>>LB;>wm@f{oy;#)Z)#5Zt6h_B&@7GJ@UAdcxi1qn!a!Q3|i%E#xvDH1C< zW=O2zm?5!&V}`_5jwup5I3`FS!VhF7A@@m3?BI})*vcUxv4KNEVhxA1#0m}t2~77r zfVv0fz5q#xd-1t1L~;d3gyb5I2+0i`5t3UuLL_%^1V|#>2Qrh8`)*6@;J6{NmE(rQ z296sNYdCI8tl)Tn#eEB)?t!^aK#H*YM5I=5NJy>WkdWHIAtAMuLquu^hkz8qeIPRl zxo@`Q4vra;TRCP(Zs3?9xrSr5<O+@jl9=I_0Cf+{eHWm7eBpORY6Zs)sWluoq&9He zklM;|MQR7f1tj-@%p~N#XsI0>5mH+@BBVBOL`bdSh?ZKxksyWXJ_Tt=c){E^0m{ec zzA4fxIA%z%;g})4fn$dBR*ossJ2)mtBf<}4CL#ApOYh*2klxB6A-#b^LV68{wDbxN z1!+w8J%G9g=Dq+Kh<ow5FGOYqM}*88jtH3z91${GIYMN1a0JL8+y^p~ko#^+@8Gy0 zy_MsJ^ahR_(rY+wORwN~fW>_apzeXWPe7Ki`$S|{a7f6m;gFEsz#$>Kl|w{!2Zw+x z!hIk!3At~!%nptjGFv%j$ZX)4A+v^Kw#*8S1u~f7mjHDS%zYQ2e0<?|MRo<p4cRpu zH)J<(+>qVMaYc3q#|0$!fy^Z2zG&GU91*fxIU-~?a74(i;fR)9!I2<~={^NHNO-~A zHv!7W=e{X&D>!Dzt>Ks<w}E4Z+*Xb$ayvLC$RWZHWF{f^Nz3ivkdWKTAtAScLqcv1 zhqT-Z4h1<(_dS5R2j;#2d5C-Qxi3V11xJMZ8jcA04IB~jTRB4HcW?yABisivlaTvv z%kAK}A-9#|hTH~@8**znZp*FUc!0%y3!v_SxlcfWu=_+5R&Yottl^MQ*uWv7u$4nZ zVF!nR0>XVDGYPqGw)_r`8S+~>X2@^gm?6K0W48PXjs^0V;g<k)56pcRpnQDccST_Z z#|?!w95)m;aNJPX%5g<u2gd~@_kqkL<i2Qy9UKt~TR9>WHgH5Jtl@}OSizB?fayL3 zMM!wT+&2Nr$LGE&iYqu~D6Zj{p}2u#hT>L^DT+HdCMY7p4`e1G_em@6;E+(<$|0e+ zfkQ%Z4TrSi3JwKDO!qy2x(DXI040cf@wqQVX$41w(i)Bkr41YrN?SQXly-0gC?VVj zGLw+|ZY%EKxS_a}<A&k}jvI<=IBqMh;CO(=eG8!Ofw@mWnXvmrlvi*_D6ip=P~N~H zp}dttM0p2?fHJ~;ATtTMZ?@77ju}c@Ic6wr;FzJbhGVwU3XTOznBkWIbq~ya7odE6 z;de!O1;-8LH5@mTH*nlg-pX-Bc?ZV@B=>>LB;>wm<sBRm%3C=ils9lhD6ip&R$jr8 zpp5B01r<nm!Q3|i%E#xvDJm;CW~i*;n4z+PV}{CBjwvcTI3}nd!VhF7A@@nE?BI}4 z*~%fIvVlWFWetb4$_fqz6-@U%fVv0fz5rE-d-1t1M0Ev6gz6fO2-OW75vp4`LR5Ef z1gIk12Qrh8`);f3;JBf(mE(rW296slYdCJJtl)Tn#eEB)?t!^aK#j2bMATMrNT{vh zkWkyeA)&UFLqu%{hkzQweIPRlxo@`W4vrbBTRCQ^Zs3@qx`t!6>I#kps+i%I0Cf+{ zeHWm7eBpORZ3V{-wKW_!)HZP3P}|CJMQsPi1tj-@%p~N#Xtf<25o%jGBGfi;M5wLd zh*n#{k)Vd@J_U71c){GK2Ib>(pO*Rx4n6fX9D3>-IP}!Fa%idV;80UXgdfOELhh4R z-@zfFzLi5leFKMt`Wg;t^%Wcn>InCN#sES6VAwhHF^mihoeT^NrA!PAy$lQtus$<r zy#cH*4H|oZu|eY#pfM8=#&<piY@7wuCkKt4A@3ii#&{;Ej}Ec}G(G{c1JqXsow+S- zCI}yg0P&aXV*#CC(@6F42r|!40l67;26r>)PIM*)hRM)-|Kij{IMviQaKx$ka3F^@ zj17tdP?&=-Dd7&<&j=d32aN^cTSL#?u*})sE5ixj9w$Qv@R<rU+0zrk$iM(PbRZUV z=K*v-6KviLBo_)51C3>Y;u?lQV>2KO8Y?t}3c|t+w#EQ7mkgSF1%&~z^F+wu;laSb z0LnMWbLyZmCD49(@V<Ufh`?6t;#jRg&Kx+XtN@*J1PT|>nhekwA}C+N!UZG;3Kx)D z@P!M=ov<-~^spgky#aFAz{VPp!v-|h6U<P`ki<~TkjzlTkjan)p4kTP@(1l=+A|%z zdYNI;5is454qeTh%n4qt*N`U-q5ZVLw1XsMB`QOU7npxwA7mveu30j2!WxuDKzGi9 z!g@QFGzgLdg*C`;xWXDVFNDqCur)BCc`s1e3&O~AVIVU>Nf$kC8bD<PiTgy6<Hmu3 zfdN!bBF7CV{n#)tq-26a5?2V4w`KsemTea_A0NUJh9Egm7=qk@D-1#T*ap1Q5pg#) zEFY7z{sK8XKxF{oy+I61>cC-hAO^BmE+Ksun6FT@8ca7#hwL3{*nR-afA9vf29>&D z30i+~1R9q7ObiU@c^@PP3QJHr!WEXFITW<DrQq|gK<N=QmJZSjntubOOKj;6lqW!8 zM(uJFv^Tne{USK@8kXM%)3`#9oV*MwHwBp>^@%i=umj0~!j4e6334Z{youbNA*W6O z<rPr9f}A%&?U;OqA_fHpg{lYOP*K?R8bWJ9_MzblCGzqssJsHLQ3jQHhFHQ0BnJv7 zkh^fDF_1qXZf<Y{r6W+9!j_h3SC$?4^Bo*U)D0Vuzf7TN$QDc3faE}7L%1vhg$8C> z2AbOktsfvaZ-MeQsH{XzKcIQVJcfLR6oyoW1V2Xb>TQ9SkX76QojhRv0c9aDjVrXs z$!{qP3=E)&L{K`)z!Fv<IZ#-E+=nk6!Q2i?M=%TuJ@k5!mgQ1GkvKSf3J%GDX=;WO zs9ef~rYX?ccl0tHBnJv7O3EczosXWbu&tqitu>(c8XD03JD~Lmp!;|Fp=&olYY3Fo zUvRK$fbbVq5FZxrpgt#zO>931)aRtf8kz+H3NB}>_?$sBXx#=ZOhGhE97KcGaSXOK zGzCly44}0fp!;_~Wf7>4fE@m?_<)5yIq?AM?}FBZ!RioDSpmw^AZ*3VzyR702V#S; zH8TUlUPcB6O@>t<E)+L_hAObIp+abs67=joP@fQ#24tY~{h<87<iNlHatlZc9|Hq} K2#5id2eAQV3r*7i diff --git a/media/image6.emf b/media/image6.emf deleted file mode 100644 index 86f04da6cd195fe6fa3beb6950ca46a0a070f17e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 75224 zcmZQ%U|`5$K!7k71_mJ}1pmq`28K9a1_lLJUpEE@Mur=zj12EN7#LU(O28}!HU@?k zW(EcmCI$vOkfC5v2ytf)2ZPNG76vy41_m7l1_lKN1_oDOH*H1-Mg|!M1_l8J1_ma9 z1GhoiDi|0TKp3R9fPsM_1*+D-feEY*VsC@JyaNjZ55#x|IR{oaTh@VrL4<*UfdgbF z0|SFT69WU614Dxf0|SEu0|Ud=+0p+&_FUe#-_idPr=z;aDkpUjEhj~&o+Jhauvs8A zAUz<=z|dd|wTc0m4GJc8sJS5ZAT`mmuYxEBRU~s@Yz_v7hA;*O1_P)bkQ?(D7#K_# z7#LVVCNp+1G%y-7Ut|Me5W5R*4m$%w1I!$dQjohqn1P|e5o{rtK(Ik>1BKxV1_p*X z&@kk1U|@29+6M}6kd|{Gf`Ne{G&Iy6qz4&;q+sg)|NsA=!-0|6gMop;1{Age2X2Gh z3{nFM%RL=FPIsAaIl*X9*n-4iG)SC*k&&^HnVDJCfe|S#85ltR0Ab{?MP`HC6wkoG zU;(lhN`veL@j)~wUGhR04FCWChq53PEX+V=z}T!v@gT;)z`)MHz>v?tz+eiG2T=Hf zFeDB@aRSpzPCRHp(*np1pg7sUz`(Es9w&^<6Brm6T0njiIB*;0kCQ)JoI*o&9cWE6 zFe5-S0|SGI17iayKZ5cZD6fFro4~-p5CV5EWoZaK?m_0yU|?YAK{DTmfq?;(PGM>9 z95i#`Orwyfc4S~^aDeGKIVlXBUSZ`8NE{UYAf=!%1*Jz2{U(^jg@F+>O~T>~WHl&l zf-rKLL}r7`g{4oBdRV%I(F{V6^bWE+Y|=>(1;?;-1=0sAOF-s<6u{KN)PTf=k<yYi zw9Jx*mZ1hL3=GE13=C#S{Kd=+3=z;g4>A*kL3tU3*+69x%W`I2metG}EUTGSSXMJD zuq<a*U|GxzGeZGtCO$J1SoD}xShSfnShSgSS+toASoD|;Sd5uLg(j$sLw4V1H1{R5 z5OQBSi!Mtxiv~+Jiwa9NivmkJivmkB3$pt_X5x3>J7yJ@*UTC$ubFjOUNal8ykj<C z`Ha<ln^{o9PnngF`_x%=S+rR-ShQJHShQIcSkze+Sd>|j-3Kxgzx&p)sIaVN(O_B4 zqRX<H#eiiUivi1K7Hr{H%!=y1#{}K?oK=_QHLC{8YgQGO*Q^RG&sh~%9;3JqWF~(1 z<*}-;WV33pWV7nBWV0Hu<gpsC6tiM;pD`P%`xdhi3cuxSx-6^NG+0)%sj#eOQ(#%n zrogh84LSTkX5x3B9-9h_Hk$^EHk&SsHk$#99-9G+F&j4beMWO%GCLvnrL*g@WV36q zWV5TVWV0)<q_ZoqB(o#C4`e2O_q}6NVR_A_!Sb3-m*q8^0n0l!1D4NN-M5(?HT;x0 z2)R$4LzhLHLxV+|Lxn|~LxDw|LxDw^1KE8bGx57`9lHw4YIY5l)$F<~tJw`$*0CF~ zY-Yz6e#IQ9?t4toea|^`SzdE!u)O9_VR_A=!1A0!f#orZ`#@&mcV8Zd3QIPJ21_=F zE=x9t0ZSf-0ZTClHuo8GqPlM}C!z3L&Z*0?np1;iHKz*8YEA`~<(vvEi#d_Q4`e2O z_vvw}uxN8?uxNAYvS@P}u;_6buo!b<bKhq)_a$=?a$h=^E=x9-21_=V3QIPZ0!uoV z0!uO%vim@0;&<OWP8F8doEj{zIdxfHa~iO`<1}FTjMaUcxlqGTnVXRN)VXz8w7E4{ zw7FGSw7C^n)VUQ{l(~`J2Qm}C`_^%(u&n0NU|G$j%d(owfMp$*0n27CY~feTjq1L~ z1l{+XTbJcEw+72=ZWWf-+zKquxfNI*qqq-bCVuzjajURob8E0<bL+BXa~rVaaT~A{ zb7OO#F%PQy7V{7azvVo-EUS4mSXT3>u&m}$U|G(iz_OSJIs8Co;&-1Oj|z)6j|Pi2 zk1mTgj{%Dwj{%D@4>tFGMsr^>FCq7(^Xjr>^J=hU^Qy39^D3~U^D3|;^CG(sWF~(1 zz2i|~dCjB2@|s7N<u#81%R3$emd{w-x0x3;{FM0!xlf%>mqnXTgGHN9g+-fBfkmB9 zfkl}Q*?k~0@w;ywuL{d*UJaJjyt*u_c@0?B@fxsf=EW9%#eAsldrZ)M&-rv&Uh`?N zyyjD3dCjN5@|;hB<uQu;KxX21Uml+dOE#YdOE#Y_OE#YYOCFyAOEDid_Zjn}x^FQ* zq3~PIugkKUUxQ^ezY5E0eg&50{0c0K`H{m9WF~(1>G7+uX!C2ZX!Gl`X!9Ge=<yq{ z81rLu-)A)UB?}O8U%G%UOSXUpOSXUtOSXUlOS*spOR@m6`#@&mci%gH6_(fh8Z58* zby;5X8?e0NH(>dU)qR@<P{U7IkdXV-1$9}p1vOZ-1yxwI1r=D-1r=D71(DqcG84c1 z)(NPvtQOE<SuLQ;vRc4^Wu1Tl%Vq&=;a4n(>b}PW-S=Ejm*usf2Fq(f6_(e63M|hB z6<8jlxDR9|e)r`Gs<31WYOrJr>at`D8nEOE8n6@#VsoFd5UTqY3lR#x<wCkFtA#XJ zRtu@HtQJyWSuUi&vRDW?{6J>ncb}e+3X8Uo28*_kE{nF10gIlH0gJH^Hurr-b6>JB zA@`*V>#}4EYp`SstFUAXE3l*sE3hOBBfAe|CVuz56H;M$Eu_KnT1c1WwU7bJJ0Sy> z&sg2JSr|3^ltl=+PhCWpMO#FJMO#FLMO#FHMO{RJMOg&deIPUOyKkMa3d?F?4VKly zx-6@O4OrF*8?bB^#uk3XBB<_rOwfJLMRZwSi)gUC7Exh&Euz5kTttE8F^c;@X5x2W zo`?!dwulBxwumlEwuk{so`?ZUu?RNz8H=L2Z?Pz$@LMjb%d%QjgJrd-3d?Fy1(xNa z3M`97k;4yUCVuzniK?(@i)yfFi|VpyiyE-#i5jpNi(+%%XEgUEixF~Px|l9YwwMM> zwwMY_wwMA-x|jk>vKX@aKxX21-#bwime-;hEU!g%Sze18u)GsBVEK&IeVfHl!%tb9 zko(ldby>8<HCVL8Ramse6<E~86<CzTk=+L}6Tkb`iK(!x7Smu^EvCz|TFiiDotOd3 zW-)BxS1gX|zQ+XJ_gq|;<+Zp5%WH8Jme=A6EYHOiSRSLe4`e2O_vMMJuw;vCuw;wt zvSf=Ju;hswuoR19bDyyUs{0m85DLHL61ps_B{W!8OQ^7{mQY|>E}_7(SOPixKxX21 zpPqyYi?)OYi?)O=i?)OTi=Ko5i?IYY_kBilU$P`2_oYkfvSdqYuw+ZBuw+Xru%t^W zup~<&yANb0e)qkTP+@s3p~3Q6LYL*WgaOMt2?LhTSlzc-5;gpkr3krCT}qclTS|jP zTS|pRTS|dNT}pvPSqj;GAT#m1Z=IwH%W6ptmerEFEUP6ASk_4zuxysZ7JkK2sP21A z(0$LPbXi_YX|TMOQek;5rNHuBN`d7uiu*uj;&)%3lnP6>lm<(-lrBrQlmSbglmSbz z6gKx6OQX7Pu{5FZTQ053vRYb$Wwo>l%W7!_mgUk4EQ_U)!w+O8e)s7~tFUNGYp`fb z>#}G|8?fj}8?YElV{_kUH1{RT5OQC-j4n&Ij0Q`#j0#J(i~>u#i~>ut46^$`X5x3> zJ82b`*U}m+ucdWaUP~LWypuLy`Ha<ln`KbLPg$0b`_yH1S+r#}ShQtTShQsoSkz?| zSd?Xv-3Kxgzx&q7sIaV-(O_9Eqsy{d#(-s=i~-AL8EoNKEQ{*C#{}K?TvnImwX6oq zYgrYR*Rl#M&t(-@9;3JqWF~(1<;kkBWXo!>WXtNZWXl?`<jESa6w6|BpRpXO`xeU) z3cuxYx-6^ZG+0*4sj#e;Q(##xr@*pU4mtclX5x3Bo}3Dcwwwlwwwx}DwwwWro}2-T zu^cw{eMWO%vOFR8rOWHGWXo%?WXr3tWXmhCq{}O?B+Dba4`e2O_q~%-VR<d5!SY&8 zm*usb0n0l%1D4NN-M3jDHT;wn2)R#PL6=2aL4!qGL4`$IL4ieGL4ieC0oi>ZGx57` zoxBRmYIzNo)$+P5tK|(?*2x>NY?j9se#Hu??t4toea{tiSzaq>u)J1KVR@~f!17!{ zf#orZ`#@&mcVC`@3QM+v21~YrE=#t80ZX2O0ZXw0%zdEwNYFfkJ#=0bG<ReOnonY2 zU=U<tV1Uh;faX|Wb19%XR2UmHrw5wf0bzXesT$C^7mzuic`MMoEl3PBmyK<X88m+f zn*X$x`wyOD2B`(jSu-&ZH|L2yAA~-)3^E7i2jsbBkT@tjK=XMZH-hGAbr`xBbQp}8 zRXIQy#2y-R%b+j>&DE8-Fge3$P?&<mVKhjb8gt8_c(njckRi=66En9A(g%wN<hf;# zIB0GeG`9<zTSkuqFdv$(K<N->4k&$s(jy3yk|r4#85q8R(!Q^oww41Voq^UpFfe>@ zf_jYs#D;|*hXWHED2;&9CX>K{+YGC<>_F;3ZU@mI_d7E<GWalfGB_~=F?cdCFqk<o zHNfU<LGy?pwIIyJz`)?lkk63Ekj9Y7kj_xbP{fePP{P2Vl4Z+a!DPp9U&Ibf&o2Pe z4N}XX^g%GqAaD&#H?;l((+(P9_F(nFst`Ka3PLk9fU-Ksd7xl|vxT7H2yzR^&!D^p zS`Pr4;|H-pVnGZH3<Zp!SY=>%1CoTA0;2YSG7fk>01JaNLn1>CLncEKLlHwJNRnjS z017%#bb!|vOpt3~pHNZ54ssjF(R*IlGJvcD&9j5#IOJNu>LZyL7$VMs^qyr|@EAlh zFnCnduvb*nfaQ6f<d+9*maNgp?k&^I=`Bl&6kr4S?Z``8hJ=^43=+C7A-@$l9T*sF z89LrGmx9*X%y@3g(DK}tK|<*)OM`3+`-6F23<WYR?4Wu6dL{;jg6Fni-2H*M6jW|N zyvkf!FAiCo1G0b1b6bXrk}lT&P6g#4T4hpr(eoh1^CADvvPd*Wg4f&p2fOfu(@7?V z(<x<OA^7?gkiS7|2s#)T7(nR+R3;@dFo4(pfaDk$c%4E+d7VIVpm+k&pmhKcw?Ifx zS_5IwdIW6gjGKXh0fyP2YdJWfVj!o1%mkSP%VWF@3=N=id<p{t1IS&Va$MU1vi=98 zj+p!d$_pTWf!4)<+y?Rs2s1M<Fl2)B!U0`RaH?%s5e%VcWPxc09I2RrftYj*^8?5( zko}-A0fi?hTr07JD@YC$t{`{e3RjRh5H~~CBZ0ya6b>-EVByukzyQkC;5A(2gcqoO z29-I;;RW)C0t3VT1_EINiZ4)H)j-QQa_k4i6{yXCY(FS3Ix@I2G?YHHYiL?-*D#gK z9z^4cC34~j)W$JqU|^7CU|;~n0VoVW{)VM}P~8Js8wPR<NFEgSFbr}l2nR4QFo4_% z%JU#O^tgeAEqYqU);>wuKGPXghiX9Az=7%-5Jq0xg3JcF3uYfO8@cUa%m`U~*U5-j z*Jdu<#b7RM%-kUX!XWn0XnTOd2h_I6vpE88dw^(Ac!9)WG)SHrZ4Xes1jRonPGK~t zmV&JZL#wLb<tj)YEKZQy9!89ib!}aYh;?n~aRB1O^itCH0J#B_FNs;#_VVXCXHeUN z*7QhR*9HnxP<jN>gx0lz@-HZ_gD`R)M`nZ6z}B^a*syd7qlsD92GR%X$AHoaD1D=^ zYXgbH`e-2a=<C{Eh@!4*1Mvy1YkMKOocW39YUT%`tC??$u4cX=x}5ojC}LgP4XBx* zG8t43gWLtepfVPOLG6bdqI%4?MYWk9h-x!G5!GgXA*#pxLKJgd8^}GNHE6ItH;7MY zUE2%Mbe1Qg*(?u4vsrG7X0zN7O=r0widfeMav#V{{O)_ld|UK2^8?Y>%uhsLGrtgh z$NWMRb6p$AJ)kvc$nGPwuI+`WI_ncrZPo{(+N`%lwOMb7s<Yk@MXYNBxesI}e)p|o zxh=Yy<$>sGmM5aCSzd^)V|gKpxvmZ5KF}I8WcLwT*Y-m6IqMVA*Q^gjU$fp8ea(79 z^f~JdQN+47ko!Pp;&)#j>uu3&)(4{5tWQL<Szn0evAz(+T-OG2A7~94vik_FYkMKO zob8F|YPJWWtJ!Xgu4cO-x}5EXC}Le3$bBF)@w-ot?Y5{k+XGQ;wkM+6Y%fIh*j|WY zu4@Ci53~ji*?ol8wY?BcXMZA^&Hg|%oBg(EHv0|HboLvfh;?ls_kqmB@4k0zw?$vG zJrI4(_C)kG+Y8ZmY%fGVW2|cfxev4k4cUE!*0sG5Rp)pjs?G60RGZ_rs5Zw9QFV?R zqKI{EAoqdH#P7a!?6*Z%vp*1B&HhAmHTw(Eb?h%hG1s+$+y`2NhU`8<>)Kw3KIeEM z`kLc`=xdJKqOUn_h(71IA&OYn267+BO#JT4<G3xF&GA4qo8yUSHpdImJdPKlnCsd= z?gOnsLv|mbb!{(1mvcT5UCsGGbT#K~(bb$cM3-~k5JjwO1Gx`mCVuznao!fy=6oQk z&G|%BoAZUJ9_I^D%yn%b_kq@+A-j*zy0#ah>0D1lv$-CKW^>&Z&E~oxn$C4Y6tS)i z<UWv@_}%x8^S0<~&Ih8eIiHBW=6oUgj`M{m=DIeJ`#@{ZkljaUUE2#$b?zsk+T0IB zwYhJLYIENZRp-7TidfeMav#V{{O()Fbz5{b*8|bjTu($-bG;B<$Mr%Kb6p$AeV{dH z$nJYgU|rh_(dXPxL|=115Pi*kTl6*e4bkV^H$)NZ+Cc6DnTg+hdEB=}v$-FLW^+Fg z&E|d~n#cV@6mwl0$bFzSXvpp(w65)i=yIMXqN{lxh_2?jExMZLhUjvh8={DHZ6No7 z%*5|LJ)Ya5+B^?LwRxV1YV*7h)#G^~in*>0<UY_EG-US?TG#eMG@bW}Xg2Qy(QMw^ zqS?GRMALb1h$7atf!qf&6Tkc3@!S@D&GSI?HO~{#*E}yo-|@T<#a!10avx|78nXKc zt!sNBs?PUBRGaUCs5akiQEk2(qUwA%L=o%SK<)#XiQj$ecyEiY=6xW#n)iw5YTg&3 z>v&&?Vy<fgxev4k4cUE!*0sG5ea`np^fliD(bs&pMPKvX5Pi;fLlm*D4dgzMnfTq8 z$9G#ao9}^WHs2G`Y`zzwd3-NKG1s+$+y`2NhU`8<>)Kw3F6VzDx|;ui=xYAkqO19D zh%V>9A&OYn267+BO#JTC<G(Gc&Hq4DoBxTZHvbDzJ^mM>nCsd=?gOnsLv|mbb!{(1 z(*>T0W(zzJ%@(*Vnk{fcG+p3^C}Le3$bBF)@w@LG|83FN{0~H5^FI-N&HqC59sdha z%yn%b_kq@+A-j*zy0#ah>Vi*1wFMuDY75>L)fT)VsxEj#6tS)i<UWv@_}#Zo;I`;$ zfd`_i1)hkm7I-1LPT++o=DIeJ`#@{ZkljaUUE2%M=Ymf}Ukg4EeJyxf^tIp((dU9U zL=o%SK<)#XiQj#Bg11Gp1s{lJ3qBFe7JMO^C-_1Xb6p$AeV{dH$nGPwuI+{Ba-k=p ztA!qjt`@p2x?1Rl=yIVOqKI{EAoqdH#P2>mq1&R`LJvf>g`S9N3%wB46M7+vxvmZ5 zKF}I8WcLwT*Y-j*UHFM;w(tYdY~kCY*}^wO(}iz{BG$Em+y^ofzx&<^-4=Z<^g#5r z&=b+uLN7$$3B3@-T-OG2A7~94vik_FYkMK8F7iZFTjYVLw#aQ!ZIK(I>LNEp5$oDO z?gN>L-+k+ZZ;P%LejvJ9_=)Ih;TNLogkOkau4@Ci53~ji*?o^i@Xx!x5PdH4MD(@D z1JTzaw?$uz+z@>(azhlct_|cqkeT@1mnU*tG+X3>Xtu}`(QJ_yqIn`OL^0R3f!qgL zgNE!rLhIUIh%Og>BDz}if#_<{+oG#QZ-_1zy&;NN*9LMQ$V~k1(-XZdsxA6JR9p0k zsJ7?}Q9aQYqL}O2K<)#rK|^*Qp>=I9MAOBdh-QmD5X~05Et)NMLo{9NhA3iP8_0bi zGx59co#<`R*P;(ZUyD8weJ%Pz^quGnQOtF1AoqdRpdq`D(7Lu4qUz#LM76~qh-!=9 z7S$HNA*wEZLlm*D4dgzMnfTqePVBbmYOx2RtHqv(t`>VCx=!qcDCW90ko$^}*0q87 zgx0ma5PdHGMD(@z1JT#ww?$uz-w=H+enS+ot_|cqkeT@1mnVK(G+X?EXtwwh(QNS- zqIu#kL^0R3f!qUHgN7V_gx0ma5M3_uM0B;p1JTtIw?$V=+z?$ZaYGcbt_|cqkeT@1 zrzde+R9oVKsJ6rtQEiDAqIwc9L^0R3f!qgLgNE!rLhIUIh^9+E5zUr-Aet?CTQpnp zhG@Fv4N=6pHjw*3X5x3>JBiz(uO%LczLt0*`dZ?J=sSrQqL}O2K<)#rK|^*Qp>=I9 zMAfC9h-ync5Y?8tEvhYbLsVVrhA3iP8_0biGx57`o#buN)shcHS4%z-T`l=Sbe-f2 zQOtF1Aomp`t!o4E39V~;A^KeEiRf#o2coZ~Zi~K_x*_^p>V_y{T^q=KAT#m1FHh>W zXtvY?(QK(FqS;a}MDwIxh+?j51GxvZ1`Rp<2(4>-A-Y`piRfzS2coN`Z;P&$z9G6? z`i3ZCT^q=KAT#m1Pfz-`sJ8S2QEllbqT13gMD?U!h+?j51Gx{h1`XMLgx0ma5KWhP zBAPApKr~zCwrIA@4bgO&8={DHZ6No7%*5}$cha{-UrRp_eJ%Y&^tJR0(Rb1>L^0R3 zf!qgLgNE!rLhIUIh^osz5!IG`AgV2UTU1;2hN!yi4N=6pHjw*3X5x3>I+@#|t7RUD zu9kTsx?1Li=sKAfqL}O2K<)#rK|^*Qp>=I9M4!t(5q&NDK=ifjZPC}VH$<Py-VjBs zYXi9tWF~(1<;mU_&6a&2nl1Z8G+XwCXrAl~QOtF1AoqdRpdq`D(7Lu4qRZu;h_04< zAi7%aw&-fP8=}kQZiph*wSn9RG84c1^yF@fYRf$k)s}lAsx9|IR8Q`ODCW90ko!I( zt!o4E39V~;A(}4#L^NCefoQh;ZP9G`8=~p*H$)NZ+Cc6DnTg+h@8oWazLt9+`daRZ z=xezbqVMEhh+?j51GxvZ1`Rp<2(4>-A*!zML{wYhfvC2^ZBcE78=~q8H$)NZ+Cc6D znTg+h>*Q~Xu9klwx?28;=xX^FqU+>eh+?j51Gx{h1`XMLj|r@6dm;K<;fd&Lg$JUq z6>f{ZR=6ShT;YZ&VqF`^eIPUOyDv}SwrIA(1JP`SC!*O3FGTYcUWnpe*A~ObzyMm; zmcU4xb#0)z7tlN&Xg&nA9tbptjBVanNvt0{Z)}6Mt_?Jg1Da0)VdQxvWH!hS^!Xt4 zb!{MXVDpm5bIWqjx#f9CbIXqfyBHn|8Z+OK1Yr<+Xv{5x!Vol9xAE>d@Z2(p2F)ph z#9=f@o*Hw@pfHEc*}-UH=9WSFVDW%Fw=4slTV8-Pw~QVKAU;elC3DLlH-OUQ4F(2= zGtf03_}1mX!Vk1A2Xw{?Xq_5pJ`c3c0)#<pT09u?8HyQ77&0017}6OO7@Qe`8C)3{ zru?&In4e+C@HNX0L^nh&2Gb0wN5OQ%uSZ~-;lp<@-EddP9;D7eLLE#u>@@(>48iVT z`ao?on8vk&guHb=ptE9hLHVD7fuWC)fdQ0HLH>fRApyyO@*l{bxYm$>&Q!t?1`MF} z1|Yqlbztn!HB=xzXdM-3Z4rzOnk$9HFKk_q0|R8u2dLaYUYCQd3^_bc*yVcrGY8Px zlgMaOCy<*#7`d!KW`oiJ%syP@gC7%Q&BGEV#F~c}DkTgrR6Ln2wLloeE`hI|ASYdd z(jq<1R04%hs7{cR$3qPl7!3+9kT{G6i4Vr|!IufLerzcdWUV+T-Jr(-h!2ZTa^eA$ z?m=syK<NS$CvO-S7#<K&KET2cW8G`tW6*MPP_hPNP};|~?iI9_7j!-ua+w0kD<KSt z3`Gp-45<ty45^?~%Qj2fF$BunF{lQE>4r-!V47jY3<#aS8A9(p51~&#g3yxxAv6Q| zYg}Pr11cAg*Smg3TSPPgq=0JcU0XpxhO*vu1(x-$9G|M#CoJ_~dvVl_O@)Dpp@|u? zMj0IF3|<ToC0(pDmU@7eUoeO;EMnNt49U|Vc~JR~kl)1$a&|yT7wd*+whW6O<d=i= zFfedsgVcb;e>}5gXz~{;XJGIG2{FtJ5G$9J)O`3nfGZoMwt;a{S;2E#2H1MnBhNrl z&y`*9(Uzg0NTU305zn-L|Ns97>2s6mD+B2Pt#JjdcLl9p1+fjD+cNlC^p%0k0@bCs z*1Lk%DJC*8Fz_)jF!VEFu6G5=NkPwX!c|_!fY0ATO<$k@0%1_z0@0wr2dyOr(I8L5 z@)oRYM$R9|Wi!6I6qZ*&b?F)g28IO;3=GKW9+dyw7%~}B8FCm>7!(*>7*ZL^7%~}> z8B!S-Y*yJeyqRprkjiNXrW=(Zv}_E7wk(6t3^T!W!=0s2`UHg5dJ3WM`~%YtUs>%z z<~aNj1k<=`RdUv4g4X{=FflO5F)%PpXM&tj2ufqHIu#_R1zlT?D~>>QDz2~q#Sf^? z0>uq74JtQ4Vla6SjV<o>FfcHH*4CldtDy7vK<xognFLz9530LC`dJ<1TtI8=XibmA zHFlsd1+~jTG)n>_-m~LCaSbZ7Kp43#gUkliU$8ZHAoZ~JIgBP|jU7lItWO0p50nPb z*Vuu?@vX6&p^m!74#X$4#%_lCa^|V(tC=ULuV(I1U(MX1zMQ#39kIr)18OF|K5&P+ z9&?YnHuD5^ZRV-!+RQW5^_XX<W3I6Sxd*f!4%SBp@d>T5o1vc0GF3gBWrBJ(OOJXs zONV+oONTmQjUC8+AT#m1?;UfG`fKJ1>aUrns=sEQq5h6}hC1dNJCJ)o>*0{yM`(@R z40UzZsp{IS6V$a?d(^dAJJi)#JJb<t>_F}VnTg+h>sWf!SF=n|U(GUAeKpGr^>r*W z)G^oCf!qgL4~OhNLTl`1s6S_&s{WdFg8FOL9`)C(9qP|nJJb<t>_F}VnTg+hd8|F^ z*{l=PvstIAXS2>w&tsjTj=9DT<UY`PIAr$`T4OgueL34y_0?<>)K|0hsIO-0P+!j0 zp^jK%2XY_CO#JTCW9w1ZW}Bd{%{EnCn{9@=9@`9c%r$l(_kq^KA-j*z8oL?l>FiV0 zv)L!8XS4UHXR~*xr?YpcBi7h~+y^ofzx&>?^{BsQo1p%hZL0cfwi)X0*k-6>uCW8T z540W**?ol8*v(K^=a{Ol%`rh;o1;fvo1;Troufk?vBnPMK9HIC-M5atM}0N>1ohSI zQ`J|q&rn~-K0_UIjUC8+p!IOb?jy9uZif1Ej;ZReIVPyT=IBv>&C#L$oTEb>vBnPM zK9HIC-IvGFqn^z%K|Pyes(LoZ4D~#Y8S0p8>_F}Vt%pN)AE7mNGt`%JPE}vcIYE6j zXOH@7&JOkEoE_?jHFhBPfy~73K0VGJb#2ZG>e`%B)wMZisOxdgP{&+j2XY^1Jsh(8 z2(7W3p`Ok)RXv+)f_gSrk9sy&hk80!hdN@79mstkGx59c9cPdFYt9MkuQ{ixzvi5w z{*H5oI_4TXko!RE;gH=&XpP+rb#?Bk>e}2B)U~;L)U~-g)YZ8=)Ddg!K<)#XiQj$e zxO&uAb4^fR%{5hhHP;OFbzC#lG1u6E+y`0@hwMH=YwTvIKj)sR{+fG&`fKhU_1D}T z>d(15)Ddg!K<)#XiQj#B+&${q+!NHZxu>dUbI(xE<DQ|8xyBCUKG1qNWcLwTV>d&6 zInPw})jSi_SM&6!ujc7cU(VB^j#y&{av#V{{O;4^=~36_nV_!CGgV!iXNI~S&kS|U zHFhBPf!4zzyN}QsyBX@~yi?V)c_*l6^Y*A`^LD7G^LD5s*4TmE2Qm}C``+>NsK4f! zp#GX?s`_i58S3wNW~gJXu>-jev>p!GeT3H7%}`h8o2stOH$h#SuSZ>*uR~p(uR|TN z#t!5@keT@1w~n_*eKqd{_0_yn)mQV*P+!M8LmhLC9msv4^>E1UBeceDhWc~9sp_x! zCaAyW>rsEr*P;HLuR|TN#t!5@keT@1m&ezmp3OHwJ)3W;dN$t-^*p{A>X>WnK<)#r zheLKBp*40h)R*&5RbS0NL47rUkNRr<4)x{y9qNcRb|CkG%*5|LJ^mhbZT<=B+Wb@1 zwfSeL>+#P}$6R9vavx|t9J2cet+AV-o-Qy|JzHRcdbU81dbU7^db&V|dNTa%IFS25 zX5x3>JN_Q^*ZdRIU-M5@f6YHb{T=@db<8z(AoqdR!y&tm&>FiL>gs}1)wKmDsA~)M zsA~&$sH+Qhs3X?cf!qf&6Tkb`3G}G17MP&ET41XBYJnN*>jY+~W3I6Sxev4+4%vN# z*4WKZe=ayx{k7l(_1A(u>aPVm)SnA>s3X?cf!qf&6TkcN1bfu81t+Ly3r<zf7M!7; zCpbeLbB!IyeW3Ml$nGPw#%_lCa-pf}tA!@0uNLZ2UoF(3zFeq79kIp^<UWv@_}!-` z)T6E~G(lZkXsWul&<u4wp&9C!YwSSo1FeTcb|0ZNb~Dt|g{P`#3r|qb7Vc5c7Vc0_ z7w%9;tg!>R4`e2O_q`M9QGYEoLH)JRRQ1<FGt}P+%}~c&V+V2{XgwUV`v|SEo1v~Q zGF4q$WP-Z3NRPU<NQb(*NQXLNjUC8+AT#m1Z=G<D`fA|`>Z^sPs;?HFp}tOdhC1dN zJCOT8>*0{yM`(@R4E5(CQ`KLKOi+I<(xd)bq(l9=NQXLNjUC8+AT#m1FHfXLJzHdg zdbY?^^=y$D>UknF)G^oCf!qgL4~OhNLTl`1s4o|ts=iuug8FLF9`)6t9qP+PJJb<t z>_F}VnTg+hdZIn*+M*NGwMD0@Ym3fM*Atzgj=9DT<UY`PIAr$`T4OguJzZ?7dbZdE z^=z>o^=z>Y^>ncgb;KGwko!Pp;&<OW(H`~Jq7&3#i%wO4EjmN}o#+g8%r$l(_kq^K zA-j*z8oL?l>f%$?wZ$i>Ym4`&Ym0ZNtBZH2Bi7h~+y^ofzx&pS^{B5Fo1ng0Y^wTd zu^H;?#Ac{tuCW8T540W**?ol8*v(LXE<RQLwfF?}*Wx|uuf;pmpNn^>Bi7h~+y^of zzx(pUd(^YVC#YwOPgTzrpP`;7K0_UIjUC8+p!IOb?jy9uZif1DiK*(VB_^n^mgrGm zEzzOAT%toAvBnPMK9HIC-KQtfqpmG6L0wy7s=Bts40Sz;8S0p8>_F}Vt%pN)AE7mN zGt|>1r>bX5PEgO5>`~8_>`+ga>`+Inu>-jeWF~(1y_4use=RXV{k6nY_16+J)Za<W zP{&+j2XY^1Jsh(82(7W3p{_19Rb5+Zg1WX;kGi&0hq}5{hdN@79mstkGx57`on(*t zYRL)et0kwZua=ylzD{z6I_4TXko!RE;gH=&XpP+r_2*Jk)n7|ZP=77eqyAc|L;bl_ zhdN@79mstkGx57GPpU^fTWW%Ow$xPhY^fRQc~UdfG1u6E+y`0@hwMH=YwTvIFPEOG zzFK;M`fBMO_0`fH>dU1&)Ddg!K<)#XiQj#C(mm?h(i7CRrKhTEOV3c(lb)fDxyBCU zKG1qNWcLwTV>d%RU1q9!w#)?eY?&VQY?%)AbeRry#2P!0`#@&mci%hd9`)DK6VzWz zPgQ>{JwyGS^bB>(HFhBPf!4zzyN}QsyBX^0vQyQyWhba>%l4>i%XX-%%XX+E*4TmE z2Qm}C`_{?ysIQippuSpWs`_e~8S3j~W~gJXu>-jev>p!GeT3H7%}{?XJ5~L)>;(1K zvOVgrWjoZL%XX+E*4TmE2Qm}C`|@Oa)U#zLsAtPgRnL~4p`Ir@LmhLC9msv4^>E1U zBeceDhWc{3sp_lcCaABL>rr1V*P*^#u0tKM#t!5@keT@1rzh8=t}Qn~U0ZIdy0+X5 zbv?Nm>X>WnK<)#rheLKBp*40h)YIjss%OhjP|ud{QO}m|P*0cdP)Dq>1Gx`mCVuz5 zlj~7`EjK~^wcJ$o*K#w|-^tBT$6R9vavx|t9J2cet+AV-uC6duU0Y#-y0$`(y0$`x zy1GJ#I%16-$bBF)@w;!Ge2@BS`3dT)<)^BzmY<=%PJV_uVvQZ>oE6YK7wC{C(D^gv zObp;PY}KGO0yH?A4Kx=5S`R>I4ckdY1{cset0x}|oI&@0!RE|C^CY188W2XFr$J_e z)S%C|ps!&Ase#SGBClZs9r^?ck55dHwKAajTTX>822KTIW(j=|2C;|68a7ZEg66`U z;%r=CG$>3#;xHN{PK`Axpm>GNiNR>lygO{p6K!b&e2ouCA1oe_*RX*ufdkFGenwg= zgdPVVK1?qqYg9mP0HsL<Mg|5EM#$ZF_~zYV;fJwCg~+qnb}%q7fadFw=juV>gzd~M z$azl=Q`o`hE*;R6gV2(uVA|ooH-xT_1k((^lEL%=lL|1c(Ay5C8<hGX^s1R)`T_q! zFzw*G3_>5>2&Qq(+7q`H4wgqjbMrxTJI9T<buFN^7s%(hc`-3C1nh*I-v(NT0$M`? zI>QZg2Al}PI))?63=GKUxZzpX0=}M+z`B+kkolmsC|K6D<j`VW3+PTk2T&OfTAP4n zT?<GKRNjNq9j-MK892@hgrrHtS#F>;hoH3);Ib0!JU37t28n~zfabkn`4zVA1+=yU zbY2+x+6iLvA86eR=u9-wd11(T36!5b83Gtw865gk!KZ{dye|OL3749|G-c@=<_AzZ z2iXrg+bxF)a&A})wB7*8F+k7E1IdBT4FkCgS6GA0fw&p6HV;>Lf!53RK-bYBuM?u= z?ns6Mkh>$X-NpByDA{G>-DYQN1qCn-sw>d%2n5x|AdFlGBeOwuE#5U042<A)t)TSr z{{V<YU|3j#!Vbm;)f3^+Gg?9CBeF3vFic=(VBlh809D@%cP(lJI5lbnVCtz+Hz21| zYJ@ec{R3JT1o9im$C7r+E|>Q=z{48E@BiKAJea~9RK|nC9JG)Sv|dhtk%0l^{tFrs z;4r_S@qnt~4httx`GCAm*=b!dsENREId8SI%JS<@4M&q4L2H#k?gOoR1Eo1ongn6w zw1~_GsX=ci7O#UG!wO3~AT=;Hayv1Mk%0lUpfQb+f#D!@9d@4RKDInjKAu1^5C*aL zvBC6`lLkR;5^Akwwp)?|zHbv$R)X66pmYZ+mqF?7f6FH4Wp^E%K{O~VVPOiQVd5Yf zlnyDq9~P8WVC_Q~joePmSpq)Z7UV22hJ_zUAB+vk|FC;{Lm3$uvKSZ`(is^T4nyMs zIs9Sq0n<xPJiyWv$PJ)4K`w(qWdW#62d%9Kg(=9<<lKh}iyv%dFzCEEQ1~mUO?Cp& zpm;zpgJEt2rB_gz2Vvy2j?4zBftAM~HY^@sH1e7@T=4<Y2g^I4Z~^%nrWO{~AaQ(a z+8&59Fo+@DcUA!9<Ll36i;D4Nhzj#$i1P7dh;s2{i?Z<)h_b=&V*{B9I&c@C8Bavn zcwUHd@w^b_<9Q(}%=1K4jOT%<7{+~P3Q+gJ`s^D-AnwIy_G%F^o)sd(JS#-_cvgsT z@vIhM<JlmBa39D_Lhe%$W#iEh<>Jv0<>S#173NV972{FB;=Tl^dtmPSAWYbOuZ6{U zUI+{Gyb$K&c_GZj^IDjV=Yuf9eIPRlxi3Y8jVD8dizh>bk0(P!m?uR<j3+?^GyE1n z-2-!<0hEs~{IrF|cr=8Cc{GIicr=8$c(jGtcnpx-2Qrh8`<4i^@vIQ$;#ncg$Fo9M zm}iNw7|#M>O!qwyf`k{$eFacHKKEq{iSc9z3G-wK@$qB`aq(mevGEiLA;J%2CL#Ad z5n|(cA;iV=LWqy&g^)1M6Cp942SS+cQ-Hb$=DrPr5clG9-)ccIo)v<^JSznGcvc8< z@vIhP<JlmHa39D_Lhe%$V&l;e;^NT|;^WZ}66R4665~<8;=Tl^dtmPSAVAoCuLZ<- zUI+;Dyb$2yc_F~X^ICw7=Ys&keIPRlxi3YKjVD8pizh>nk0(P=m?uS0j3+@5GyE1n z-2-!<0hEs~{Imtccr*lrc{Bw0cr*mKc(euBcnpx-2Qrh8`<4i>@vIQw;#ncU$Fo8} zm}iNA7|#L$O!qzDhlCf*eFacHKKEtwi}7Ue3-e^~^YLWxbMa*Jv+)%0Bf<}4CL#Ad z;b-G{!Oz9>f}fA)1-~%Q6MiwC2mF}sQ-Hb$=DrPl5clG9-)cTFo)vt;JS+J4cvkRn z@vP=!<JrK6a39D_Lhe)HXXDY}=i<@e=i|}f7v@pn7voXD;=Tl^dtmPSz)RSDuX)9I zUhoR@yx`^IdBMxY^O~29=L0XoeIPRlxi5u}jVFVTizkDRk0*mqm?wo#j3<E)GyE1n z-2-!<0hEs~{Iq$+cr<v0c{F(Wcr<vqc(i%hcnpx-2Qrh8`<C#s@vPwG;#tAV$FqW0 zm}d#E7|#M;O!qzDfrJ;#eFacHKKEtwi1B3b2=ip{@bP5uaPegGu<;b|Ai@u1CL#Ad z;bG%>!NbM#f`^ai1&=V#6CN?12RxYWQ-Hb$=DrQw5clG9-)e3#o)z4}JS({Qcvf(8 z@vP=%<JrKCa39D_Lhe)HVdK%@;o{NY;p5TZ5#~|h5#v$7;=Tl^dtmPSz(v@7uero{ zUT_KXyx`*FdBMfS^O}o|=K~kQeIPRlxi5vAjVFVfizkDdk0*m$m?wo>j3<E`GyE1n z-2-!<0hEs~{It2mcr>_#c{I5Acr>`Uc(l3Lcnpx-2Qrh8`<8IA@vPwD;#tAP$FqV< zm}d!>7|#MOO!qzDgoGE&eFacHKKEsFit%J{3iD)e^6_MFa`9wyvhfsfBEk=3CL#Ad z;bh}^!O6w*f|HNu1*b626HYOn2b`GhQ-Hb$=DrOa5clG9-)asqo)sLzJS#Z(cvf(5 z@vP=x<JrK0a39D_Lhe)HWaH7`<l@ob<m1uc6y{Ok6ys6A;=Tl^dtmPSz)skGui3?T zUa$-EykO_!dBM)b^O~KF=L0*!eIPRlxi5u-jVFVHizkDFk0*mem?wopj3<EuGyE1n z-2-!<0hEs~{IuD{cr@6Bc{JGhcr@6#c(mEscnpx-2Qrh8`<Ae?@vLCy;#tAY$FqW6 zm}d#Q7|#NBO!qxtgM=5%eFacHKKEs_iScBx3G-yI@$qD^aq(ocvGEkJA;J%2CL#Ad zVPoTY!N$e&f{l;o1)DI>6E-oP2W*(`Q-Hb$=DrQA5clG9-)dGdo)xUZJS$lFcvi4- z@vLTL<JrK9a39D_Lhe&xW8=|a<Kod^<Kxj_6XsE26XQ|9;=Tl^dtmPSz(Ux4uUW)+ zUa$!BykOzudBMWP^O}W?=K~AEeIPRlxi5v4jVFVZizkDXk0*mwm?wo*j3<E=GyE1n z-2-#qEGQpe_)TRI<C(-F%rl9Fk7p7K7td4{HlA5X?gN=g$bCy#*mzd3aPh2Q;p17s zBFwXdMT}<w3&MS%@fXk>BW%vqoq>U29|Hpe=-d#{7zV7*3>rg*^`${~(!kiDF$_@u z9)yXxdkEB52aQ`$YYY=MRskEE1C4ut`ud<T0720;POlbPIm5;(K>Q?0cZ$a_L4JUZ zPrztm#*IMwVBrQDHwtHfoXG$h2iwU2IYaOy17r*{k##lqEEYbVMAjl6m>y7A!`PrW z0EIaSlM?Qr@%jenm_2B`2sBm%3Oi7^fx_$@h+tq~2n`Lj2e}s+gQQ^UVBwB!j0hCo z$YXcd#)v@f24Uo}AY?YkUcBQ%NaOUdu^y27Ko}NAATwZWSa^f%1cf(foGy})fgz6p zGEP5>h4L{{<Z&;0rEziNrOvbEo;ZQVM?ql@;;+#^?KGIe9272|j0~WY4j4dTUII<y z%S9B~LF3fRMWQGgn+BN=8)pZFJ1xdU@y$zt=A#xjUT_A@Pl0G`VGna7sB8kIK@dhx z@5pRWx`m~Eka}1d1EZ10MDfj0!Nx>E=7I7BOf4)=fW%?tJBW>bmj<T>0|O`0S$~yK zKE67uR)bTjQG-XSQA1FwQA1R!Rzp&%QbQ7chb_oVNdouavS>(3F=~iPF=_}(F>3Hg zv1o8gacXd4++lkX>K<5~YN-ivFFyC#YH~_BYVt@qY6?m@YKltPYD!93Y9ibRGLw+| zj%Y|q9n=t&I;bHibx?yx>WBuX)JZJv>x8-o=Dwd$K0f#T)#Q|7)Z&q1)Do0p)Do5Y zt0^h<6UlubGYPq`MN?9$QBzc^QBzQ=QIkiiMUzviQxh}%JhdR<1#{m{C?B8u_G)oT z9n|8HI;bTmbx=!GYOj{0)J`o#_<_tM<USWINhwDyQ7K0)K`BQq9w`?sPAN|<O!skW zqq?sW%E#xvT5V3LMr|IcMr}c<Mr~24T5U<GN^OMuKxPthAB(o66r;AN6r;AF6r(ne z6pJ>e6sI<(`%XgL0}DS(9f*7JxzARIQ_4|?N6Jx0P|8t9RLWLIQp!>X;XaU=gxq&T zTT<$vwy4xWZ9%Dn+B{N6v^k|tVsT$5)IBiw{e<%Ix$mzIrxc?uj})V>pcJF7sMKE_ zNvWSm?gN=g$bBt3l2VO2qEd}If>Mn-JW?$>oKl@SnBnKC3kffn`*uS4_}sTwms9GX zE|1hfT|udXx}s8hbtR>C>LS7qWF{f^x#&ttIqHf^IqC{ZIqLFAx#)6AdFo=ik5doT zeU(r?KKIq?aY{An@kll52}(8UiAvS#NlI1fA>0QtlaTvZ^dzMi^+cr@^#r9D^?0OM z^f;wB^)TIc66zjU_*v>h+>6hBw)&h>j`}=Oj{1U9j{2ffw)&D%mih?yfy^Z2z9V{) zQU~=!r4H%|N*&bWkvgKsDRmNy`#PcSfw}J|l#kDSfAu+~7!7!&7!3ra7!5?F{_0Cg z{X}vf$V@`+YtfgKYSb5%YSb5$YSibEYSHJE>eR;!KTiWlc){Ga6UxWuzP$#VQU?uq zqz)PgN*y#1mD+0{DYer85q=;u3AxY3KvK%lKvc@nKv2rjfJe&3fK$rT0MmV(hN$kV zg!1vZuhx)Ls?m@~s?ktTs?ktXs@70as?reQK9HG&+{a=lDaB|gD#d6hD8*>VBgJCK zDaC1s>AsUt_rSu>(g@;SeD1R~;*@eU;*oMR5|nZ@5|y$wl9aMELbwlPCL#A7F_e@# zXecUm&`?n7pdpXc5kpR?lUUr>33U(5eLtameD3>e#3{vS%p=8UEGWfjEGqTaNK)!2 zlKVhr5^`UQk)%|kk*HLok)Twg5sy@h5vNqA5oY*#8biVh=DwX!K0f#DHRhB$Xv`yZ z&{$CFps}dbUSmnAoyLgp1DQ$4eJ;k5QjW%=QjW%gQjW$vQZB}vQl7?`?&CB;bzdcv zkI#LzCY(}@COlG&CW2CpCZbZcCX!N>CJ6U|%p~MK786M+MiWsfMiW6PMiU+>786b> zP7_S`orJmv7Jind5clG9pRFmUl%pw+l%uJjl%uJrl&z_xl%*-ceIPRlx$lUHq|`wZ zQK^F_f>H-fc%+V)a7vxT;=WF(dtmPS3FYH+-(OQsDMm9MDMm9vDMm9<slTR@Qa_R0 z2Qrh8`&vvTr5a5|r5a5Ir5a6nq*_clr8-S9!_U(U5?(O(?S%62xo@u-r_@0+9;t(7 zf>H;~M5XqcNlNWBLxdm5OhWE+F_V;XG!vC_G!v9^G~<zSG2@i-G{bZsr#Y(oDxrLQ z?yEKDlxj5Rk!my-lxj2=m8vzDl&UmGxDR9|A@{MEOG+`Ci%Kz?3raDX^GLCnb4qcV zW4iAo)IG59v$TM?7oYoVEjXndEqJ6HEd-?;EkvbkEhMEZEfDSlnMuffN6aOq4w{Qf z9W)n|I%v)#b;O)g>LeETbwb?(bKhMkAD{akS#U}{wcwF@Y9T1~)IwD1k%gqxT_pE` z%p~N#77IzKMhj7?MhiiyMhhOP77I?PP76f%p^rJ%F)=XAhpwAk!pOh?>yuJz%n{Uw z28|0)Ys?Wg762MI1NG}cV`3mXKz(fH&;*yp`Iq5i0U-X-<g*lyIfBfG_5Wcs@|Yv6 zZx3<<2*djLAbl`4Yzz$K<_2a4hMCYXUkP0|DP~b3b=N{rO3Y%dBuoz_V~!xZLE#Qs z{|!2O4zzBP8e@*2^aEPM3<`J9T6&OwLF)ybbvT^=w;Xha(O+9soLzoycLvee#$-Ta zFd&RP_JYg?jfvnLhaqAN5)=lou!My_Xv{R3k%6I&fq|iwk%3_u0|NudAAw@c9EK7g z?8(I-?#TtyM~yfDoeK%N4;m5&jLg`=aQA^7&KnMBf!AJw!VJW>^ptZ3(I9aKM#e@F z2gU}_UGO0Hg2sSBX$dy=1`10MMh-({HYhyN$E09mw=lng)L_g1u=TE>uuElRV3^0i zz)-}<z_1z`c9P<2xdO#Jxg^D(a)Q_}^FU#T%{*eq&q3)IdEG0%y#QP9A9Q}nx!DQV zUK~(51!2%W1Z?NU!p7o3M`wb{J{UG)V3?3>%g|eCN7`NikX>TXvnWCPD`0U2G8f;T z7+Rk7+92D)4m#^qBfGauGpDyKDN=wJlzwVn+A>JIv}JH<Llp!00k$W`1Ei)gk^!_Q z<}!3o3`l+nqZb37Ju$f;H3as=<l@;AlS_*|F(C{L450hAL1%$ZVq{>bW&oAuAeZtw zg@*Dvf#k}eVxTp>AQ>12?JoggP<}Ro3c}JmY%dFFjt4Z(4$AMydozehzo5M=xYD8? z149bG9pz~e=3Y=*1ce0%Ple7AOve%)AUR^fLk~xIAlE_Uga@qrM9!O_GSHbJh#{20 zg@K{c3LGj8d%D0hgV0V0ed#@fCgF@`kQb2iEqYji(#$MqSe?KURv<Z0Sb^M!EA4>7 z8|HS<{vHqp?Y{!q4YQBdX-R>BK~u;ce_8^SzqCrrHjr{v_c4X#DlEK^(=sUk)-W(I zfb#ZaXg-GR!2-$kL&b2#4=8Vg>S%27f!vNICoO~G9yAAvoR&fDlw5{%hFk`QC%kqH zpfHi`2Gb4ho53_?bq{(NB``2BOkreT0EN+RMg|7-FapVe!U*IpTww(A2h`0Bpf(BU z-T`dkMXU5v!q8Ckod#h8^4C6S*c`?ZHXu1r*nrX-uCM{6A5i&^Ej(zIe*77dK>J@< zxa`5{$3+cHA6RDtrm3HPjzGicK9(>7$$`R%Q2K$o8NBBYR0d)TFIuG^I|ha)ZZrrR zQ2KcY4V#x(!UiM<3L8S{2e$hOmUm(G!4U=q2GG87a@!W5Gsr>rA|RJPpfyNE45<vo z4EYSD3`LN0;U^^99yqCD&v4=eg!cEe1MwT!+o1GjFwJoHK7^k87fd_c6tD-W!<FK& zo%;@ocYJj&sGI_o+n~I20ov~Xg&%U6zMP1&`O*Cd>I-l|^?}kK2!q5x;Q?|Jdf1bb z7D4xdeEpQ<jIUj145<q(m}pQJu3}<fxX-}Au!)I*;TyExgM}MN?h{lDUs+}h3JeAY z_*o6Gv`DM)fVOjK5*}Ni;js-%c!1=H2@hQDTypXza{9oPH-i{b844Ln!8x>qK>^a< z1%=L}ZaW4GCc6gqZD5+=?jtbma1(M$1cQhy<TQsPx?uVMpADF%cHZ0x4b#6^!W1M2 z3R6&?!j;BA?R#`Tg7P9LZ-QtL2C+eAfbu6OIilxH&_3iZ(6x2Mw#$&i9<<$j3&>yw z2Jn7jQ27G73nZB#pCOMSjUkgE9b7ghg72dOi77BJY;gsL=Yf6U5ZW#eLWeYg>4fVY zVEVwGUND_-d^(su@MjT(&RGSamuvyk3a561>4x<OAoTmwVETc|budlMcmv%L0@|<* zDjN!zG0O&!94OvEVSp>%K<7f>3m;H?f#ME?i8&Vnqz)7X=y6L<{}DNELFo(BCPS|C zK>f2622gA!f=l0qrsZ}F{X%wN+CK$C@9l%oRPH~5%H8h_3=C&M_suY(jy-_nK<5{L z+=naNL2V3}+d*Ll${V=y1vzE3pUo_%{|RMI`06Y}aHxSwA6%&t`&lud_{CS(gZu`< zRtyXbu?!3hfzbL1R%e0ae4%2v!Uq)Bp!*j=cA=*w&>173_5>;IC*<$|_1&O-LwGp> z8aLGgmCK;f8Bn<l8jk?cR7^LZd80T61_n^LBx4B|kQ^vnKyJYoE+BWp_WPrU4f451 z#FnARVe^22f#C`$(2>eeLGalzkZ~FX22cwOxh6|v$Y&@5g&bcZxaMMDp9iKJV$OhR zhdxGd$>(rR8ca77t3v2t6EN-2=Lx16e#V381IcAz+TnaFgjVkZ(+hm2f@uf&Sz!9X z!UYie;c5sSxEV}SH!XwelXPgD{lF4uAURN+fx-w^oD~okehi>;0E9u~NT4xYP#lBG z1W?%k5(i-r8&oEP#6j|)G8rTe;)9|MJw4E>>`-86P}xBsyvZGVLQapk#!(?-PvDXs zM-HW|>;jGNgX)}2XgP&kcBMkaaK$&M?1Gjr80~Fb_e<d$S4IvGP`L+6PssHkDDENS zI3*0w{`eDKNUbN^4W>b3P@u2^jkkbk1{N;J*-0*HU>Y>W02ZfeSc3YfpfU{<mMa+; z7|_EKBnJvhko$3kB`6Ni{01MZ0*zUL^n&sWC=bvx{X@ncs2^sax^Wc)0|O|`Hem@f zkQ^w?Ky6!GVFpTnxW*n}`3b%5#C9H!>Qou<IZ>eVcrHAbc81M=f$AsFJS7Mt&rc$= zL2A(FDv3RhrwDYnC?f+yBNGDyXgvd{oKsV;5l~aNmg3X^VGx_LGoe6b6Y{(yHRjb} z?F!JmI>^nS^a$G9F!SO?_&HFpFa^;taS#ofUmtAe@f0#KFo4eEYGPtwSjGrB%M3aE zVetX0b3k*&FgCIC!>}|38fOH>32aRWD1Bl}lc0S%ZM$YTgVN-OpEe}jWeZA^F!#ac z!$IpHK<7UhGBPlL&VNdT`ZG^dLO4&9M=Vebgh6ZxVVGWW{0Z_KJ<=O!9mkQ#4d68h zpm2hP7l?+5gXqDS-azL+88AZ5e*&%V0OcX%@Q1|*CGmis-srKPZ$p%vOW=bU&dxu# zJG1PWLG!gtur(o|@&|-r;RVWLFg9#04X6yyV`N|eg*)h+U=!%Md(+irg&D*tOY`Vq z4XVpQbrUFWgYMG=wUI#i4^&=)`pO`;KHR^<S>o1gc>0}saEEiuys6GG@xio)Mw=0` zhQ@*svi?Xyyhb=sOhQ;ve2Wl>4GU{fc|qwK8d~hh1Fb&-#RF(fkOF8Qr@(>RpfVB^ z51@0(t|_f^2Gvs_8Wis6=ahlc4hSRH`^apNS$Nlf2{D4(av=MNNwXmHVBrX2qwlu^ zofo!O6mkzXsBIV^#=rpLgZkZ|dIe+;2!qysfH0`<6e6})G(zlvXoT2N(Fn1Vq9I~u zMFYgnio(`>g3LTC3fWtX%Z%HiXGL#_o)o<ydQ|j==mF8&qI*Rji0%~y-E<7<t4T93 zfc?1u>K>Tc0^)?-CnCOAR6_iKsD$`YQ3>&rq9WpFMFqqW?gN=g$bGZL&Wg?uJ1IIt z?5OAru>+#B#rBFW5W{p|0@OV)_g#SU@rB<N@x7uq#1Dwx5I-t<L;R%Z74fs87m(Zs zGLw+|qQ%dOMu?vjjSxR78X<l_G+KPGXo5JV`xGP~;RSQw1SlV$`=&_j6`dh*Ky-%0 zQPCL^Cq<`7oE4oQfe1g4nS|UYEpb*<LgJ*Tgv3!%35f%u(h_?`6(lg-_W<f1nEL`G zA@0TJz7Wa1q7jk@L?a}RibhDD6b+F)D;gk)a39D_LhidQaaQz(#7WT`5=TXENE{Ho zEwNYh0T%ZyfVv0fJ^?Ah?h}#PD=Hy%KvY8NsHlY0Nl_80v!Vi02={@^B;>x?l4nI{ zNS+j(A$e4EhU5X!*^+xj7f51;Ujo!UF!x=6^6`b=6{)?VH>3`T-jF&fdPC}@=oP86 zq8E_d2Qrh8`=X`JibhDC6pfHNDjFemKr~uvuV{i4ru!76A>jpc-vlThpZlgr?-iXP zeL!@E^ik0n(kDfyNS_s*AdLt=keP(sCoO$eR6_cssD$)UQ3>e-qSDfPMHQqm-S+_M z9+>+AWFYRv=e`h`y`m8^2Sg)ej*3ReoD>a_IV&0<gK!_nOhWFvEqzw>hV)6%8`4Kb zZ%7{yy)C_0^Z^$4Er7ZQ<~{*g!tN81-76{~dq7k|_Nb_Y>`74(*|VYovIzHq%p~N# z*)nHEXULosogs5nbcW0U(b+P4MHk3mhF=2IJuvrOfb#K$-xb-tqBmp@h~AJrDtbfq zr05mdv!WM}+y^p~ko%%#&x%IKo)nFcJt`U@dq6Z=cCToHET;Pu<RIY%bKe9gAD{cC z$n6!KA$LG@hTKun8FD8@r^uZZogjw@KaiP(+$Sw}R#Zanq^N}4QBeuG1ESJ$dqoxG zFx~e6>K>T;0^}j?#pk{d`MshM@&`mC<d2F*$e$Dqkv}UMAdhe#$V@`+yDfKC^oHC? z(Hn9{MQ_L*5WOw8SM&iE_bq_B2j)Hj1;XwVQP?Xgp>RM{LgA>Wgu+Qt5rwm&0tyKC zfy^Z2zS;6;MQ6yL6rCY|RCI>?0nyp=dqo$>V}@S>)IBiwU4ZiOh2Is0y`nc14v5}R zI4XKW;iTvlg|ng;klY6{laTwO70!xAD4Z0HP&g_Yp>RMnT4Aqff&!-d6ci!h1#{m7 zC?B8urYP<eouPO@bcW(l(HV*-MW-m96`i1n2tSaSgxn{scve(G@uaAP;!#lv#RH<! zihD&B6fxcR0O}r?`vR08?#1W65T(7M5lRO{Bb1JcMkt*W4N*EP8lZ%5AIMBX?z^pc zR`iDANzogMM@4Ta9uU2)xL5Q67WXZHx(DVy0cFDO6H(qPDxrKpR6_ZvsD$!KQ4!^{ zq5{eY_kqkL<i6QTXGLcyofMs+bX0VP(gD%gN_#~YC}D<Q0@OV)_g#SU@rB<N<-MXe zln;pBP(CVpL;0lW73H&{7m(ZsGLw+|qLt5zMkt>YjZi)+8likZG+KGDXo51P`xI0l z;RSQw1SlV$`=+Su6`i4SKy-%6QPCMHCq<{IoE4p*f(Sp5nS|UYt#VdWLgl2WgvwD- z36%q)(kgpJ6;v?Y_W<f1nEL`$A@0TJz7W;Dq7kYGL?cv>ibklO6b(^5D;l7Ra39D_ zLhie*a#r+)%1O~1Dn~_cs2mWzt+H420T%ZyfVv0fJ^?kt?h{elD=MLOKvY8QsHlY6 zNl_8Cv!ViO2={@^B;>x?s%J%KsGby^p?XwwhUx*)*{XX*7pP)}Ujo!UF!x=6^6`b= z6}7#hH`ES@-cUO#dPD7`=oPiIq8E_d2Qrh8`=Zs(ibklN6pc_jDjK17Kr~uyuV{iA zru!7sA>jpcpBj{p&wX0zdqwrs4~Xii9~IS8KPjrEepXaX9T9#YGYPp*TK%l3g!)NQ z3H76*66yy;rPcR}DySpe2O38K^)q2-ki{@EFhnsjFqASeFvJgm{eZA>2vGkTG-d=E z4+4!<f%@w1<&rL295%woAwc|}EUQ6dXpK}Kk05hD8pzElObiSmj0_AVObiSu(EWgM zYMNqd>PJQ6)DlIJ$AVyNa>vL)>ykn1c0l83_~s3FKHTDbN~X&h-x?4T$QqFO88le8 zSis1@Aj8POP|3)^V2rj#1|+8s6~i}=1xgd3bN~x8O4cnB6CTiYi!=$3YG`=WVhInB z95La6Yu(}n1_lPu+C@;BAa>mca(ICDmx9(VBF`&>_5*;{^p!9aF=R5NGL$i-g4TI} zR>pwB2efi=eg<UaB8Wftk{ttxj{N|p9ey&}gZU=nVA`Ql3rsU?v4_x9oofcUy#X4& zN3n!2NDdUfAV1+sZ=gLDSo{lKmjPOL0h((DVbHt;hz~LgMAI{U+AugodeR{LK=aO^ zy-=Y1dI3xLf#g8pM`+#|R2N|j4|3K$Ag52_);&1Pj01;FLU;q1W=QG+(+6^9gK33H ziy-u-4Pd(A`ED>x-8Dm?bq|-IX;GF5v+M)Ofx;4$mT;v-&|C>6>mJBiBZnN`u(@pH z@&GjEZpWa&pultx9BK-SPJ?M&p-0X>0Z>~?9(2bUBLjmbmaqfKfx-^t7F=NmnqvaF z6Ib2@?Lh#A54mL}D6fFR2RUp&?G?y6xC12@z@c(r%WVj)@)%6x3MKN^DS^r=U1&Ig z4jM(TUqN!9a00mtS2%(E0dX_r{x?v1#Flr-Swn`LmSAg6ki!d9j@U3He1A@ZumSnY z85%a;Ske$k4iq*ZH{c2zP#VHjmXWiT896*ac^hOta(IB|Kl2#!8B!Qh84{*{0*A_h zGk?K!LK}+%s3sLq<O0*UQW81&4YU{57aCS&Si%Y<2MQ~Y`*4L7D7;~A2d%?`VQgs$ zl<z=gIk|Zcl<%PNg0glOl;02J^Mk|Zz<v=hP0erul}n)ebV2naXk8L|egnyY!ikb{ z36@XL!v@<rm<O|Roj~W+PN4H$X`ne*&|PU>42ZkZwlnWz+s@3#13GURbPh0x4{NW3 z=DuNUV*5MvS}OxOXBl({7l;OhB`i!qG)x>s55~1Jpf%*6Gnl;@5O<{^hd(SnU|~;A zJb?POpmoTgIs_CapuQML43s{R)8y6J(crwOIXwz|&ok)mK6>8soW;z*02==|z>K)( zd6`)k!!k2t=I_=Z3}O$Bd!9jI2)f64-OYUPJ<lK-biXr597coW>5(Q$z2`ZTnSlY+ zhB(N~z+ei!zYjeQKzwSZ$qft)3`?MU#yA`pnPL4{&=?YET`;H)%CSgw2@TbCpf%0F zi~!9H3=GI;{ebcaC=Y?!ZJ_!Rl!qu;a|&9&f<FEQGM^UfgicNh1K&4^ZJiJ(OhM@p zM864UabaL&W=3}xsLTMBBcQqwv|b2=k=F?!vq5TLYlc8<*jZgL8u{$*ut}iP{y{Me z!LW1%(x=YAzyLb42UK=}WMOJyYCz)n))IwVGB6l3Bi0gu_=}nGuLBCVT+SS9xtiJE zay7G;<!WYk%jL}OmW!ET<Hhb!GeK<$P+1Cc7YKvm5`;nPk=!lyn7u5unf)!bnS(90 znZqshn8PiNnbFr0f!y;M&3(x%gxr_T5^R~x;%}MF;$@l5;%=GF;%=GDg6uw!nfTrJ zj@irdHM76vYvy3f*UaIT@0i0aKVx;@W){@&Q)VUPK6Tb$OKnzvOKny!OKnznOLbOv zOJ!DM_kqmB@4j^`UY4s_{4H0r1Y53V3AbFw5^lMf1zY$Pv!c51F+uk|XAQP|&FXLY zn$^qlHLJVjb5?iD$0+UtnTg+hd8}TR*{uGS*{s2q*{tD~d92}<#jM!eXUvA`zQt^W z!f!cSu;pqtf6LWuUY4ub+%1>0xmzw~Lk>TXnfTqO$L3|J&E{{Z%@%B_%@%H{#};mB z%!bW<pV8cx%udLC>FmLl+3fz7+3a4H+3fC?>Fn;7$?VAP1DT26eec-3EMK$vTfSxs zwtUSNZuyQa-10M4_ibiJ4L@ZLLhe)N2)5Mb@VC_F@UqnAaJN+FaJN+EKz1L<O#JR! z$L?jhn%&=WHG8n-YW8r;b?o7mo7u62Uoi)&`yLZ?-*b*&%hw$KmajRyEMIfDTR!J- zw|tD^K9HIC-IvGVWtq+4Z<);zY?;jwZkfjsZduHM&3(q4sP0?LNhti5a|T<k=JdB* z&FN*in$z8KIj6hjVov1n1DT26eR`Z;mfD>DmfD=bmfD=*mU^7wmd2de-1iyHeaT#e z+?UQ3Y?;mFZ<)>IWtq+8Zkf*IZkf!5>^_j0_}%x8)64QTr@!TE&S1;eoZ*)5IKwSJ zV|CwVF4XW-<|gDmb?#tGZEk-{ZEi11ZEkl<b#8Y{Wo~5mfy~73zI9w)maDn^Emv~| zTdw8`w_L{+Zn>EYTlf`oqq^@gLH9l94z_&F?Qi*-+spDbx4Y$YZg<PaDDDH9iQj#B z++LR1-2Rr?+`*RF+~Jma+~JnR+}PY_jC7wcsJ>gwLn!=~^8{P2=JB^&&EsXcn#bL8 zIgh*LV)%W+;QE(<8Sa*PJYJUCJpPv2Ji(UQJmHplJmHqc821T--18aDeaXCp+?UQ9 zY?;mLZ<)>OWtq+EZkf*OZkf!B9KRql@rU0#9xuz+JpPuid4erp^MqTz;|aI?jMaUc zc~Rq6nU9eB)cJxfwfX!lwfVd(wfWpF)%n~lmHCj}2Qm}C`_}P#S+3^ww_ME|Y`K~@ z+;SanxaDSEZ1G#nhw8q^1l{+XFWB-mpTFg6J}=AHeD0Rd`P?lZqqq-bCVuzj@p)Nh z^Z8q5^95UG^MzaH@r7F!^I>zJF+ZyN7V{GdzvcYFmaF;wEm!k<S+3@Hw_MKeZn>Br zIs8Co;&-1Ozn7&pzrUq6f3T%Cf4HR{f4HSFKQ{M$Msr`X03r9K3j|wc3;0`R3wT*( z3%FaR3%FY*3n04>WF~(1z2o<?e9iA~`I<l2@-=_B<vadx%g<Qdw^;x+{FDU=xldg% z*iu{2-%?x9%Tim=-BMl9-BMW)*?k~0@w;!GfS2WJ0e{QY0>PH61;Q=Y34~j27QhyM z#e%5rdrZ)M&jo`mUkmzMz83Vdd@bm1`CQQ5@-d40KxX21U!I_sWwxNdWwv0jWwv0r zWu9QTWw9VO_ZbVJx^J-%q3~NS6l}R#$lr3ckeB6ZA$QB=LhhD}g^<G!WF~(1=?QsR zY76;WY6}HhY72#1>IsEg8Vg}_-)A)UB?}XBU%GIxWwx-tWwx-FWwx-pWxBAtWwJ1` z`#@&mci%f9FU!|L{+6$Wf-PSQg<HN83b*`>)qR_VQNvGJgpm8xMS?B0Mf@$bMZ7Gv zMcggbMcgfwMUdSGG84c1)(LxAt`_#UTrC`Ixmq~fa-DFv<z``Q;a4nz>b}PW-S=E1 z*z&cAzvXKYFU!{=?v~F*+$|rYxDR9|e)r{xcv)tP_*-U+1Y2f{gj?o`gj*JiU~``_ z(q0-+eYcpvKA3RJ<)Xost3~}SSBrXCt`>E-TrTQvxfs5e23-FVFvHzaPt?m&Th!lD zTQt~GTQuBKPc+=p7-KID$UUFY+?OoIz<|&1;g;!Q!Is%#{+8KdUY6Nn?w09d?v}}7 z$ngs@6Q3FGmhVKpEMJTITfP<zwtOubZuw3$-10M4_iYwKjbCMPLhe%+54O}6_qWs* z_p;O$cehj*cehj)M|K~`O#JR!C+20jTFl>awOFv_YO!$3bz<R`o5irjZ?QP4`yLZ? z-*fR`%h%%mmaoOVEMJSeTRs<ew|tD^K9HIC-IpisWtlDRZ<#F~Y?&<{ZkZ<@Zdojj z&3(oasP0=VK`8u|O9Wf4mhiV+E#YOkTEg9OxrDprVhQB%1DT26eR>jJmf8~jmf8}* zmf8~GmU<H5mc|m;-1iyHeaVu9+?OsHY?&?TZ<#IWWtlDMZkaCWZka5J>^_j0_}%wT z!pritgumr$iD1ju65*EbB*HB}V|CwVN!0LDCU9?DxTU&Ou%)(?zooX6m!-CpyQR96 zyQMPx?m1BY1(}K8ed{E>ELThVTdtN2wp=Y4Zn;h}+;X!dw(u)Px*HFapC1!+-*c&8 z%hyu=manC}EMH5xTRxX^w|tD^K9HIC-IpijWtlDIZ<#F>Y?&<;ZkZ<)Zdr_RHy+46 z#?q+aw^*7`{4SRcwp=akZ@F69%W}1}yXA6ecgw}n$ngs@6TkcPq`fS)rTs0nrGqWC zrNb@tq{A(ZrLl$IXEgUE%Mfy3x=gTTwv4}Jwv3l$wv4-Fx{SMJvJA5OKxX21-#ck9 z%h%HWmanCQEniEATfUPHxBQINeVb)a!%tb3ko(kSgDtgX{Vla+y)3n5-7VE+-7S@6 zk=+L}6Tkb`$#_|=mhrb-EfZ|HS|;3bolLmpW*KbZS1gO_zQ+XJ_gpsE^0lnL<!f0l z%h$5*md|C~Egz$}4`e2O_vOiYS!T=nTV~4!TV~6KTjt4zTNcY=bDyyss{0np5emQM za>16X<@_yI%XwL@mUFjUF6VB!SPnV-KxX21pPrnTrM8^ErM6tKrM6tSrJh{4rLi0~ z_kBilU$Q(Q_od4RTV~7qTV~69S!T<-Tc*pqTPDjRyANb0e)qkT^Rj#`=WqF1F4*$5 zT)5>sxp2$RSlzc-9yR=w6$rUcT_M;~TfyH_TfxgxTfyB@UBTT_SpnI7AT#m1Z=JlC z<!X6<%hmG1maFB%E!WA1TW*%e7JkJFsP21A(0$Jpf-PSw_*=eK@UncZ;BNU`!QJvP ziu*uj;&)%3f|q5sg1=?9La=4FLbzp~LbzqI0?d7&wH2VbRM=YbNz4okpmW%!Gczy< zGEx6-8PHq}Xx<7m9|D>u0?mtIn_KR13kA<DTgd%)LY`X&&EtUPlRy}G9toKZvIBiS zD0=o)(9{e3d?t`Nu(=`Rvq3_kbIVte=9Ys@yBLB@jhVe|K^Vjy8gt8_Fa*uj`D>Me z=axY<Xiga<4x>Tx)R<cag}DVdgc%rMH0YE>*qkh`xn+<(SUiBvs0d?VU;v#F5e%JM zzK%4vj2;IdK1?qq>m5LD0HsOfHLLj6*~7w*!-0tnmX1O5&kU=zz{fCw)|r8V0yH;{ z?cNg5d@yKT6KD<)q!xrh>CurPn8A;MVSy`nJ#|CtG%(F@dmn@*Y5g=Pyphjr1m!i* zoGi#L&{<QU_4pw68<0YfW1)BtC@>g6^ZG0d&J2kRISiQ$N#OP1Pz5AWt)L(P9rFra zCon+{a+e9nUeMa0Juhq-K-PiQnt|jv<XXV$BbgW&0(Lfl*|57zDk^H&Csfq1i!dx= zcnrPE1a>D1p1Vvy*OfC6xXUCD&s`>Yw7AOzv?d@MRK7AWFmy9R?zD%53FI!59A*Xv zQ27Q*6ZqEPLDLHZC|*Hp(?L-K%MX<7n}DTnGY6&y*cvtDv<h;oK0|}RcPgYyn0rBH zg7O6j_d~-5R0o05El3V_9v?^!6gD6+Tww!RYpD+k3@qngld~2WIXpn_!=86t82lI- z?(%|Ha60Tz2h#`UI)P~hit;Xc7=h9cC~QDyQ0~T(er6Dzen4(!0H+^VISsQ5mVRLI z52~k;_n9Eq*-q<<!Rx_5_qlJp+w6ScXp&=rMGpM@I8ZtU#Tf`A*VD*sP&t5JXBV$? z0>>iEO(1h%Y~(t-7gSd;GBC_xW?=XNJ<sc|MUB8+3kUfFmLLpb4~_HVzW+^gdHM6F zGl&L-B`i!qG)x>s)1%JDbw&>;u3+(iTxa(%L(Y$z2RfS?8V|_f4~q|&UTW0Y$Y-qK ztF!aNHC&=ympkLCv%v`sT<<Y3V5_rX`2cwhH>eCUh3u#MwVuNLbf9t$RE~qp#8*F4 z_pUL@>vmZE4646D_mqL^=V#0e44}H5i26An6z&A-=X^Z%b3QHVXHXfxf{B3vbZ_1U zCI*HY=)Of*9R!lAfQsR(gFtH{LH>iKcUYN9&i)Em`bDmj(bFPyFC)ci5$0Y{S_Fj! z2ycRh2k5>9^zZ=55fdJ`_A(;3yOHY{V)8R6JV5&ku$_?`#E{BR0=@wt54MjH6gHrJ zjK9`H_A!F^pnZ%We$jtBhF|OL9A@&_gJ=d8RR~Q|-3^Lw<aRfDSXMAFFl>j0<p(Tj z3nT{$OHkt%SK0#YCqeTY%AQ5gehiR)5Djt<%nh*grvcrohF+%=8{RJ%7#Qw=3`ROL z9JCh&-@O8`v+qGSGddV>+cWSp+Ck`O2pu~MOgE%&0n-eBkAvw3^$!rbj?W&Xz9CK) zLZ34P(+-jjV4C5HCxlK(0MiG~m4Rsns|GNgklziVmrn)L2hPj^)3{n@ApgM1W6-)% z5F6xWd~pl9;|EkWfcE=3FhlO^0_7p(asyO;gUrSix1e-POgMtZY(Vh~!k~4epgpRf zJ^+XhihIyrI1mjI2Z@0&j17|m`3F61kW)52WzKWiJ@YKyedlJ7dXnNhIbrSvg)69B z0^$A43=B&d85oX(>K$mg3=4CR+zzN1t}qAn7eHfv^b8MZSxuAhI0+4p(^$d-Bu7km z;3})h*>{edK49zhk?Sr{x^+govn3UBV@_|S9qfk4hCSOMH$zT(0;U`0`~%YrlAPc> z5gqho!8F56V+dX81fi)~euMU%pM!?4EDHm}9%$Nvr8kfqD11SF!j;}Y{WmQB1()HV zd<w$Y@-#iuX8|O?g6=h>YWTtO>t03%h7-&T3|G*?50qa)`_V!98&~*&@++vE#1<Ym z7#JANK=+3b+m=91pRoND$mtVQUM4aWF(fkNf?E`+3`GpZpcX~H5ac#P{}eFY@Vp;F zAKw9?Km7sI3|oZ3x7Ho_rwFDSEX^UbB;+=`hLd4nJ~iti(7sDhUI&G<91CVRgXBQr z4DuVUa0aDQZ2ku60o5%a8g%X|h=%b&G^lRE7B}Ry^N`~PS357CA&o(Sp@bm=d|t(Y zyaaG)9(Y#<rWt-Ug6Rck+Q2l!r(Q6fpgt2!A2_lYOydfD^7d<k+IfmB3=E*~55^My zAURO@gTf0}_=DPcsD5K;KrS0VdO>_p_+txiTGi#g;IaYVje+Ea8LVu$%E-U~Do5X7 zDH~ou#c+igsBG|M`2U}t;bFwUaNf&~HsNuBnSlWm9ygd77|_E5Bu7km;JWkr2Ll7c z8w$!wP<wX`D4>!00ibb2Uj_vRM}`810`TlXGWf=>OmO|)uzUg}oaWvH(+$txfawFu z{NNiX8~Rkiw8KwpFwJnp6-*!K^9R!nGZP^+XBn7Q&}stH4gBp8+J6$5rfyya?f<_8 zjR#*A%y<CFf#Lz=cU<Wbbbb@=aA9Bojpc&c=b(NDC{Kehh!4V`@)VTELHQlT2g!kg z9o80x_3Mzw!jS7eO7<PX&gufq6NBdEK=WLn`5KV@pfSqTQIDLz*XFsvXfLgI&XPMa zT|hKwj1qlsAZQF2gptR7k=dZJMZEg~i8!+hWCkp3K;x6)3=9l93=9mjm>C#A_XF=? zW?;AnJ;VKgrH{-4YY;vrn`d=Q7N(CHW0Ror8&n>F`q>-~jLg`=@QQSni-yNX@OUpM z%s~7cp4ZMG8YB)nhaGueDJVW*V}+pca8Ou+Fmf0ovq52jKCTWM*M<2NWDaa^B&gj5 z6NinlgTihOGXujlMh1qJ%nS^Vp<&l<r73s7@|bM9Rgx@-4buk-J8b5G=KMfz1z`q; z21igDf?xz2<X%u7N`Xj#$uJfM1|g6Hn8&~n&ceVT%*4Q;$pE??2P%lOl?szbrIi>U j^B$miEzsPr3<KoMc2Ha~IY8t<IzV?RihvkUc@P@_+Dsw) diff --git a/media/image7.emf b/media/image7.emf deleted file mode 100644 index 119286c432fffdd81cf124c2005b85cd0b58fc2b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 25052 zcmZQ%U|`5$U|`^2fB<1e1_mCGAcV_sLX3gIQG|g(!PVD|fq{|XP9g&XFB1a;3sfFP zIj}J>v@kO;m@+ajtb++cX^!nI3>%g+F}N`>Fz7HaFeorEFu3}<X)`)7GRQD6FbFU( zFfa)mxDB#4fq{Vmgh6Tx7#J8*plS^qn84~F_BPndJFqbDK+TtPV1=_~9T*ryp#EWE zU|`^8WMJTOU}#WbU|^77U|{(F|NnoGJ<>Z?I+agPan?Dc?Hr>g?xYCSlf=LPHVdQ% zqz8l<7#eJ$Rxu#6LFTJN%>}6ksrmo^KZs&bMKTA*=3roG2xDMiFkoO{2w`Agc*4NI zz{m)3BP#;~gCDCGpC9XT0WJX$2C=>PV0zgZ7#d(~kRw3u0$~P*21l@kU;@DgxeXMC zD;O9U=0L-c!-0Xxfq{X+1RCBTE$2W40|Nus^~H7|J;)d&1&S9Ct>!HDpTmKX*@J<B z!3L@y<Ytf@C@k9zTb<?n8=PS@C~QIEFd8Jzz{tqhD8R=c>cEH;mkbObe}FJ@*dnt* zZi;7MV6Xt$3#CE!g7_dBlrCXz5p!092ti3$n1RfIv00JgA((-I;W5ZuXu1cPgB}MU zK1?q;@t^@s3m`Xu;$#N{1H&3<oM<^f{0~Z-3=9XHpw4Chv0>rI;lRY^0`)gIKKdRb zrAJ8qabyT$@MLgg@L^D32xahN@MLgi@MmygaAi<n@MQ>QFmqsPfW<v1E<x!PhHV%a z+}!LKqK?@zFf`aBT!73Lg8BiZ2jo^z-UEfT7*rf27R127P{7E*0P^QoSVn*vHvy!P zfuVt&frY`5p@<=qA(0^m?AAPnOon8Je1;T;RH$2_TJTWI*k^2=TF$`mhT%iORW^{q z2!&<rhZwY&G^8#tsW34xJdnA}uyV`Pa)I9caVK;yGc=?wV+W~A*fh2LN5NG#5UnG7 znZeRWsYs^Ow><N;cX^Vwz!Q+aI20~3fY=M}TxBbJ?Ok3Wdl{sap$1AbFeC=8xm_0w zGFL*^CFHjvr^DO#>P4V(jYsY>IBm=PO$=K8Co#z4bzLy1e5+?>VE7?>nc+LXMiB#p zMiH#M{UCRlL0dqhs9v0bp@y-IX+r8U_T^HRK_|r(rCb(Eu>S7)QL51Sqtrp}GQ(`W zH(4OVQ_3L4H7ren!W&ecfN(kk1H&T*28L_~28Iuy@&)AbhFOlQR?Tt*$-RS$`GCZc zFsNJv;Q(m<21&up=Vf4M0HxbK3=9k#py^iI0a8wa)De@0LFumsls*_37?9H+I|Bnl zE<-v)E<*`}KSL5j76U^}3pgz{?B5Kg8Imu9X@_J+dr%s6@ZyBfS@K|-!A2iKQ<QdL zeuaf)1p@;^9yBbcV+l);94IV7?#C6DF_?a1;ACK603}!u%?zz`KzvX*!rTB0?+ykA z22hxR>Pm9L8&*~$hd0Q7b_@y(2YOAxq2{3F2BvZ4d}8uF%-tZfL1{38fq`KrH0<VM z2|JJ+DC|J$afKZy9fI76D{M3v85m?3A?*lq!sZ171H&D(v<UKRF+%}EDnl}~e9B~~ zVn}2tVaR02XUJnvU?^e8XHZ~p5cC6wnS)mhm}Zd40n-QGR)gsT;Z`v1VABDn6;vmH zX$HT^VERGXG%%eoc`lfCs96f859F@|(+g&-0n-hQTflTe)*dkZAoc*5P6#{#rX8%# zfN5&R9jI<v1dY2lSmF*O2Z}pTSmBC0P`izoa0J!0p!fx05F3;pKx_~V!XPmaACyl( zd=MLiL3|Jfv9aYFTBVJAh9rg(hD3%;a9T)aC}Kzj*IIet6auNw82ZlHGHlJZW9U<} z1JhSi!F0opCNRwqvj|K#{9gyA85W;|(1rIP^y6P(y5SX@JxIU99x*V@(5D8b55${+ z=>|hL2rc0UrX8|Ez%+wR3Yb37n+2w+oi;%2u=flM3~Lz}82&=*5(a4f0+Rd9z`#H# zZ4eWVptuELSUkhxAH)Zx3s64*B#(?iaxiru8e7_EU|?V<p`Z@K)rQhwI8aiAH^d>~ z0%~7?nnIxV5{Ql7hC(k(LFFl^&IN_}W-MV2k^_Y~$V^=M5mc6f+Mw9N1Kii6pd38| zYN?`?qx=jE42}$?3?&R145<u|+>wk@j)F_dt=V=C#qHoQQ;6vY(+m73gXso~*<d<B zaWR;7;93o)5ByyRrWdGf0@Di4JHa%A&OtEUAb%80CwQCy(+-9gz_fzY4KR%>H;@-M zpuQC-PC#+<4NKgB<Unx)3J+Xy1L}L@4=V-+P#Xi3&OzxLM8hzM4@&2t`~VVz@j+}5 z#uncxj0_AB6vVd*BLjm3BWfECl$M>bmWIyYdNYk7lOdg<l%WVI4K$qXwQG>uWykP% z8-%`k5==K#yadw>eJu7M`2+DHV7kFj1wu>cfN6&;BQVWi;{>J;^m;((k^nH>@IM7i zJ6tRQ(+z=5V4A_T4NO1C?F7>Y!X|?01@<$+w8EdcV4C6SQZU_cV<nhQU|b8P9bRn# z)3{O+sO$sfYfyd!g$syHD362MA^8jp44|~~kb!}LlM&RT1@-bF?RJnHJ1E>47#MJ+ zBTze$)Hne3L5L|wLFo#l7L=wy7{mvqI}jU$VP+tUV@rFqDtk2<6fW<<8!P1HZ&29_ z>Pvy*1vFNJ9xos{P`rTR8dto4%3e)SU@$Pi$An<*dstn9-oD2+UUk#a#>tX5%PCq< z+&NZH+zB*Z0>a4SB*<(~{J`oGko#b4<S{6H1_lNz1_p-X3=9m33=9mQa^xe^O6HGD ztZXSfAPi!!WQOS_XY2#iZv>T-v>t;3h0p1^2b?b3xjDmVP<VmFVKhjb8e>qPbPgMP zg3+KH3kp9_RD<$6h=yTU_<{7n*vMm0x(o~qmJAFGCm0wQK;w@fbI{`e#E0o6Cmulc zKd3AMxd9X>pf*qjv>k-6{|*a3Q2!m4UXlBgptNPfz;H|)+(*Y%Dw3c7Km%Q%Fa`~B zg4_+V57yoU$$`ejKw|jvA85Q16c@1YgXKSR#xsz^161aM`Z~zr0jjIf#xpFUz+ux+ zKL<=RDDMH&4Q;O>bjWWo?QlvM(wm#3456t$o&gFgP*~<NFo4J6LE#1qOOPB0gWQiR zEC*sd13A3$j%U2p1c#bKmlc@Cl@iIRpF!gppgI^7cBNRt4kQN(J5ZU6E9^k^0KV}I z21W*kFVOr*?05!p*c@PBVAz7z4(DTFV8GW8cPMlMhn2&s05Hu^lK`d<_!dCuwmLBF zkkbUF6+*kfG(%l4n0~MfGOm$ucsiKxux37(J}`eVm|k#V8JKR^xDHHHGfoyTFff3| z=s<A-@;7?f0Fnd62`CJ3#R;hV!xuiFav0RU0bvju6u%%ghz4Ph7>ExlQ$c(X8(TR; zPMaG!ZgI7_A)`^C(FoAkIi#PJ#!$(iz<^_HBC-uUw!ol14NNzj+6tj(90k)1HkZJ3 z!~KsC`XC3m*W@r+0!%ZcYCvco12BDHE@Uj?K#LuOzt;ysFM*6j9JreV;fLjb=?0A& zFs<;n6-+Zc>jl#f&P@f=35RBaX@}Qyz_h}ZC19H2?{Wx@qeLVpPlMXr?x6ezor?j@ z10k1(pt2?qI=6=_{ea4UQsV%WRzT?lM8nbyh!4XsaS#nkUoaZh#)hc_(I7dP86X;4 z+9RjUjhyyy)%h9>4Cm4yJvAJ$LVlg^%D}(?3VTo-fX0-N;{_xa3mtdD6)&K&7S!Is z79IhN3=A$L_J5JXLx7Qifd#Gq3z`GN--i!iC}PNG0QG}&7*ZJ+BHO?r*Wk4VOf$SY z4Wakk2Gb4kzaexZFSu9Z5G)I!tyIA@LytCuK57Z34@~of(6xbJy5W2{n08p04yGB3 z%OP}BJ(y0=g!FwMJnaSZ51g9{rX3DJ`@pZ~fcXp}3m`O(7$zs*U0`5f0L3dPepfLt zFrddTNDdUgpfJT1zo4?6l<)?%X<+#UM8hyF|A6utNDRgYu|XKb2kC|7JrEz1&p;Sk z+M-on(`0z?XF1-OAV05x#&JP$u^vlYfaE}N0m^^4;sTV{sL{U#&2@`B(}u6d0QGG_ zm;uk)3s`#|<USZ1xql1lzpn<B6^slFm!SPyKi2(ReylRQTmm2rV(;gI=_RLM1!{ND zqkjtupVb=!!D}pFG$_14;xHN{J{bGApt=>5*O?d@7(g@Wp!|j&2OvHr@c=6C$?4z1 z!jC}zmMZHbVEzM@AE2}e!k{_%l?;&i`t6{!3MyEj^C=*?txz$1`H!0YTjcNnwQq>% z-wvwzdQez`=IhbJ5;R{A3QJIVjw>t&qJN7V-k`b<6qm^3381tB>NnD3z8(~Ip!s_A zumjE4gTfBv7F=Nmss}*s1l60MBn(UIu(1|$=VU=;8z^s%&eucMFT%nV6c?cK12$g| ziaXGJJ$l@M=IcRm2WqR~iaSsq$JY;rt$P5K+o1RbVGtYS1`r!WgD^-8#D}$$Kx_~O z@j)2Grf1r~H_r^3#RsiF8?gEMSFw;jEgk0Tw?XIYk3j1Z*q9%v?R|*C`FdD5g5nm0 zVet$~4=_F`UBKGVATbz5Rtr*(Ep3p~rbaGPara+oJ6{h9bI|-RdYFUe>p@`-YO~_X zkD#&?)Skf>9^}r~!^+Xo`FaKhP~3p#>(S!|6knjY84mOHu=vI`c1Y@6@#uU#WL-0; z&IOGfg2wz0GcYiK=Ibw_m8&4R^F)jtk{Sn~Ie1*<D5(4dm8&2cRIY;5g7_c|;)BFN zY!HT-fh>-#tf5ueOY8Z1P`rTV>(S!{G+z&j7eZw(wZ=1&GM_oY_LqRhGC-Kp@r+_n zT4RK)uLaeseyk?!eykHXxdcEM#5Q4vwGjvVc!mdqBzQanMuWl&RCmK@koaI7&nRMG zU;vG0%!ZFEfx;hzA#nhT6H4L%RR5DZo&gF!P@f4`+sB4V`#oU(1C=eHauI|<V-|(b z@r-&<S_Ks>NaGo`P%(UMA5b3{qzz_1tPe@fd_62Zfx=@bj%R?v5;UHH9+sf-3{Y4O z#_<eT`Wxu+3{cpC#xu~v4m6$t3Oi7`#g`6gF`fYno6+$M{Nov*xC4!6pvN6(JOdPW z!*M)=P};yZo&noWH(=u#bliUciht1DR5!FPK_1WOq;Na~7LK5HG6;j($RHY2R)A;_ zAJp!GwV^>`FbtA|sRPm2>M(NK)UdRHt4^o&{sT~$gZjtlVGbJ40EIcBHZ`a{gDpJB z9nXM;$LM$l0|O{-K;s$caRZ7kP}~fM@eEjekB(>1ZvR0SbUb4QTDb}u&zLrX$1`AQ z4_Dbs>+uXwynx0t(BlO(o&ky%LS-+m@eI%!$|;~VaK3KZ$ZJmVofC2668>`{Ku2tV z&WQk>F##&`LFW~K>P1l59~%15k-JRJ2}GM*n&o6sZQul=L4ABm&V&G&4_XHbvI9mV zug3?8BV$;<5~L5t2Cc^rXJB9exmg;tj+TLeL63of!JmPF0i^CQV-?e3#_KGHn69(H z^pG>Y0x}=DUk{pd295WF_JDxG4b=Aqoeu&EH&7b`<nI1XT_^ss$xfhkXrS-{@gwyX zIe}=9I0GYNqlg1z1L&LqsGk2Ydq8OeH0}h#_{N^pq4^u69%LsB!~6;o7lxko0Aj<$ zVe4%`=elS!Ffe#R&o=>`1p#u)cBVNjADOPRY-bW;1+iiJKw*c?JkYKukXu2R(Ag%S zv<uoJ4+%TmXPZ!xW?SAgJAw9%faqE&Hs@1U7CV7xP?!&<Gz%)5K=XN^F&I#ofYPi2 z3oDxfOA?1XYZ3=?xWm}QhBYiLfy@N0cOoXuev4k@l$FEe3>tp{g%^n5e}dB)M1#aZ z;fJ1PL2(Yk_|hrN?VvP>E&U*;N6@;qCI$wEPzDADP#FqJkHW0#9Db}x9Kx(~IY4Zf zc|#>Vg3{mp({|3F^a!It=@S&5gEc*Z_9lSRjy&sIZUq()W@SSTcNm-2>G7<rH8?$j z!VQ!TKUF$`(<4Y66n^wbkGrAi5i~~uNspVj{aD{}3$tqQ2(xbDhK0pYN{>#p<>2%P zqX&C>{0Xho<ykBE6<9!cVA7+(`C@Q-1ce(YJ%(ymgVQ5OoL=eiGc-N^VSt?JCd_Kf z@5frfFU-1`AH=3+dIaqOod9ibQlpKDt*umT;OPu%BQd`2fYYG*2Xr<Wh#pLBO;DQ& zwC58v1`RrQ4^(f1%7n>0*IDEQK{$znOMw1$_tQ6?&Y<=sXfG`&EJ1uwI}=2M#OaYX zk3rj#rx+L*U~S3yJVLA~Jl9#~^UPrZv4=z21l2{Lv<adIbJ_&e;izfzEjO3ITa@|= z79X^%$6;x3G;Ko8%mnq*U}rcI+s`4k+yvE2ptK312Xop4)#s>bvx1*Xpn@Nk9zks> z7<)8r3bDe%0u(OT`cTA%5vVT+8|MM_!LglN@zGbr@$lCd_MmesqV>d`V0}qY{|(gF z17UpqJ@j!2*s+o@KY+}Ev0;5b(D(`Hd_9odLg<(dXwGITgB-(DhAJiwE)WK><=|&> zfWiW14k`Yp$KD@M7=p&lY>E|}VKgXALE<nPBo4}>l%B5&>ZifR&|oz3SQ@EkTY%P~ zfyyY*ye()P5)u!f@CRW?9Dw2k7WU-C11wE}+zv{U#GY*d3qR1>5YYGuC@mxJy#S>j z8_3xfh3a;=cCVAa_f8yo79?oA5p-rT$UfLyCP)r6#|;t#wGTmI2*aRrIzbpTZU`#N zLE^CRqhzfNa(EEARt9voMWMPK_-qSM7=g~V0P#U*TYzZL*%pQBcHpxuK=PooEkHDm z9i`-jC1^jW95gIJd%DrX5+nx-%fYr*206U(u9X3uZ2<~J(AgGvLJ#Ce(AY94%@BL` z6zFUV(3mY~4jVMqjUIL&Igq)a`D}dY5Z_uEa^`rE!v@zJFaA9%;L|NYp$0nL0u*YX z(=7_s?ZBs7fN0R^79e@h=@y0RcHq-3K<YrJTNJ9>fls$6RJQ}4ZUIsUI^6=K4|KXk zp}HOTbPG@#2c2#KQa5XxJp)KTRns=8egXA=K=A|WJEO-BNDdS~gywkhhZW@PCy*T= z3@W2R@eN{wXb=X8f%u>@7Q_d!K^R-vGlP+Vp@+mh_Q>%KI-kx5ZI8Vy0|P@jLk9S) z=nMu0@M&{}45bX2U{*1M0z)F669*YSblEoinQq6hSlkXwzY2rUh6P}{p=%15X3*OL zq5m9)(C@B+>4u5lAhZ;>JxIU98!0f&V5bP7w`+mv107Zn`k)7dUJ(GM8>$k(w1ZCp zgf^}K(+x~5U^?M-H<)&~G8s%CI6fUrFZeJEOe^p%0@DoNR)Xn<mutavg3v}V?eKdC zn5J$W1sW3q%_)J>7ijJgbiOsHY=PBLAUROk3W^(CWdmqTgMxSiA9M{$XP`8PoCZPd zeULZ|gXCdiAa$U03X?--gTz35kb00hWIl+EEj`2TC;+u_k>^Q4eg@r70BYla!UZ&j z1G;Yj#s`&qAigF8X!kS7WDrI^RUMfPlEcJG&^b3yeGh8eAiD*0m_Mkz2k8Qxa|0?H KKx|OFfY<<lyoB@s -- GitLab