- 22 Jan 2025
- 4 Minutes à lire
- SombreLumière
- PDF
AAL2GenActivationCodeXErc
- Mis à jour le 22 Jan 2025
- 4 Minutes à lire
- SombreLumière
- PDF
Function prototype
aat_int32 AAL2GenActivationCodeXErc (
TDigipassBlob *DPData[8],
aat_int16 *Appl_Count,
TKernelParms *CallParms,
aat_ascii *aStaticVectorIn,
aat_ascii *aSharedData,
aat_ascii *aAlea,
aat_int32 *ActivationFlags,
aat_ascii *aSerialNumberSuffix,
aat_ascii *aXFAD,
aat_ascii *aXERC);
Description
This function generates software Digipass activation data for software Digipass authenticators compliant with the standard one-step activation (in the context of single-device licensing); for more information, refer to the Authentication Suite Server SDK Product Guide. Either an activation code or full activation data (FAD) are generated:
- The activation code can be used for an offline activation workflow (offline activation mode). This activation code will become an encrypted activation code if the aSharedData and/or aAlea parameters are used.
- The FAD can be used for an online activation workflow (online activation mode). This FAD will become an encrypted full activation data (XFAD) if the aSharedData and/or aAlea parameters are used.
For software Digipass authenticators based on Digipass SDK 4.0 or later, the activation mode depends on the content of the ActivationFlags input parameter pointer.
For earlier software Digipass authenticators based on the Digipass SDK prior to version 4.0, by default, the activation mode depends on the static vector configuration and content. It can be forced to offline activation mode, setting the appropriate flag in the ActivationFlags input parameter pointer.
This function can also generate:
- Either an event reactivation counter (ERC), if both the aSharedData and aAlea parameters are set to NULL,
- Or an encrypted event reactivation counter (XERC), if the aSharedData and/or aAlea parameters are used.
For software Digipass authenticators based on Digipass SDK prior to version 4.0, it is not allowed to use aSharedData and/or aAlea for the offline activation mode.
This function replaces and extends the former AAL2GenActivationCodeEx function. It includes the enhancement of the activation service to allow the Digipass reactivation with event synchronization between the server and the client.
OneSpan recommends using the AAL2GenActivationCodeXErc function for both the first activation and also during reactivation (to synchronize the event counter in case of event-based or time- and event-based Digipass applications). Usage of the former AAL2GenActivationCodeEx function is no longer recommended.
To generate activation data for a software Digipass authenticator using this function, it is mandatory to provide all the corresponding customer authenticator application BLOBs. The function will fail if not all customer authenticator application BLOBs of the related software Digipass authenticators are provided.
Parameters
Type | Name | Use | Description |
---|---|---|---|
TDigipassBlob * [8] | DPData | I/O | Array of authenticator application BLOB pointers. Upon return from the function call, these BLOBs must be rewritten to the application database to reflect the changes. |
aat_int16 | Appl_count | I | Number of applications in the authenticator application BLOB array (1 to 8). |
TKernelParms * | CallParms | I | Structure of runtime parameters to use during this function call. |
aat_ascii * | aStatic VectorIn | I | Software Digipass parameter settings, up to 4094 characters, null-terminated. |
aat_ascii * | aSharedData | I | Data used to encrypt the activation data. Up to 512* characters, null-terminated. Set to NULL if no shared data used by the software Digipass activation process. *Shared data plus alea must not exceed 512 characters. |
aat_ascii * | aAlea | I | Encryption diversifier pseudo-randomly generated. Up to 512* characters. Set to NULL if no alea is used by the software Digipass activation process. *Shared data plus alea must not exceed 512 characters. |
aat_int32 * | Activation Flags | I | A pointer to an aat_int32 variable that specifies the activation mode used for generating activation data (online or offline activation mode). The aat_int32 variable pointed by ActivationFlags can be either set to 0x0 or 0x1 Table: Possible ActivationFlags pointed values (AAL2GenActivationCodeXErc) lists the possible values for ActivationFlags. If the ActivationFlags pointer is NULL, the default 0x0 value will be used. |
aat_ascii * | aSerial NumberSuffix | O | String of up to 14+1 null-terminated digits representing the last 7 digits of the Digipass serial number. 14+1 null-terminated digits in case of software Digipass authenticators based on the Digipass SDK prior to version 4.0 (SN Suffix formatted with inserted 0). 7+1 null-terminated digits in case of software Digipass authenticators based on the Digipass SDK 4.0 or later. The aSerialNumberSuffix buffer must have at least 15 bytes allocated (recommended buffer size is 15 bytes). |
aat_ascii * | aXFAD | O | String of up to 4142+1 characters, null-terminated. This parameter holds either the [encrypted] activation code (in case of offline mode) or the [encrypted] full activation data ([X]FAD) (in case of online mode). The aXFAD buffer must have at least 4143 bytes allocated (recommended buffer size is 4143 bytes). |
aat_ascii * | aXERC | O | String of up to 91+1 characters, null-terminated. If this parameter is NULL, the event reactivation counter will not be generated. This parameter holds either the event reactivation counter (ERC) (if both the SharedData and Alea parameters are set to NULL) or the encrypted event reactivation counter (XERC) (if the SharedData and/or Alea parameters are not set to NULL.). If not NULL,the aXERC buffer must have at least 92 bytes allocated (recommended buffer size is 92 bytes). |