AAL2AuthorizeUnlockICSF

Function prototype

aat_int32 AAL2AuthorizeUnlockICSF(
                               TDigipassBlob*   DPData,
                               TKernelParms*    CallParms,
                               aat_ascii*       aStorageKeyNameIn,
                               aat_ascii*       aInitialVectorIn,
                               aat_ascii*       aUnlockAuthCode,
                               aat_ascii*       RandomNumber,
                               aat_ascii*       UnlockCode);

Description

If a user's Digipass authenticator is locked because of wrong PIN entries, the Digipass administrator will be able to unlock this user with this function, which performs the following actions:

• Validating the unlock authentication code
• If the unlock authentication code is correct, obtaining the initialized unlock information of the user's Digipass authenticator from the authenticator application BLOB and performing the unlock code calculation.

This function authenticates the user and generates an unlock code that the user enters into the Digipass authenticator in response to the displayed random number.

If a Digipass instance has more than one application and an unlock mechanism not based on Unlock V2, AAL2SyncTokenBLOB should be called to synchronize the unlock authentication counter value stored in the different authenticator application BLOBs after a call to AAL2AuthorizeUnlock.

In case of Unlock V2 support, the Authorize Unlock function must be used with the dedicated Unlock V2 BLOB instead of the Digipass authentication BLOB. The synchronization mentioned above is not applicable in this case.

Parameters

COBOL calling convention

Entry point: AA2AUKIC

02 W-BLOB                PIC X(248).
02 W-KERNELPARMS.
     03 W-PARMCOUNT      PIC 9(8) USAGE BINARY.
     03 W-PARM01         PIC 9(8) USAGE BINARY.
     . . .
     03 W-PARM19         PIC 9(8) USAGE BINARY.
02 W-RANDOM-NBR          PIC X(9).
02 W-UNLOCK-AUTHCODE     PIC X(9).
02 W-RANDOM-NBR          PIC X(9).
02 W-UNLOCK-CODE         PIC X(9).
02 W-STORAGEKEY          PIC X(65).
02 W-INITVECTOR          PIC X(17).
02 W-RETURN              PIC S9(8) USAGE BINARY.
02 W-API-NAME            PIC X(8) VALUE 'AA2AUKIC'.

. . .

CALL W-API-NAME USING
       BY REFERENCE W-BLOB
       BY REFERENCE W-KERNELPARMS
       BY REFERENCE W-STORAGEKEY
       BY REFERENCE W-INITVECTOR
       BY REFERENCE W-UNLOCK-AUTHCODE
       BY REFERENCE W-RANDOM-NBR
       BY REFERENCE W-UNLOCK-CODE
       RETURNING W-RETURN.

Return codes