AAL2AuthorizeUnlock

Function prototype

aat_int32 AAL2AuthorizeUnlock (
                               TDigipassBlob*   DPData,
                               TKernelParms*    CallParms,
                               aat_ascii*       aUnlockAuthCode,
                               aat_ascii*       RandomNumber,
                               aat_ascii*       UnlockCode);

Description

If a user's Digipass authenticator is locked because of wrong PIN entries, the Digipass administrator will be able to unlock this user with this function, which performs the following actions:

• Validating the unlock authentication code
• If the unlock authentication code is correct, obtaining the initialized unlock information of the user's Digipass authenticator from the authenticator application BLOB and performing the unlock code calculation.

This function authenticates the user and generates an unlock code that the user enters into the Digipass authenticator in response to the displayed random number.

If a Digipass instance has more than one application and an unlock mechanism not based on Unlock V2, AAL2SyncTokenBLOB should be called to synchronize the unlock authentication counter value stored in the different authenticator application BLOBs after a call to AAL2AuthorizeUnlock.

In case of Unlock V2 support, the Authorize Unlock function must be used with the dedicated Unlock V2 BLOB instead of the Digipass authentication BLOB. The synchronization mentioned above is not applicable in this case.

Parameters

Return codes