AAL2GenActivationCodeXErc
  • 22 Jan 2025
  • 4 Minutes à lire
  • Sombre
    Lumière
  • PDF

AAL2GenActivationCodeXErc

  • Sombre
    Lumière
  • PDF

The content is currently unavailable in French. You are viewing the default English version.
Résumé de l’article

Function prototype

aat_int32 AAL2GenActivationCodeXErc (
                                    TDigipassBlob   *DPData[8],
                                    aat_int16       *Appl_Count,
                                    TKernelParms    *CallParms,
                                    aat_ascii       *aStaticVectorIn,
                                    aat_ascii       *aSharedData,
                                    aat_ascii       *aAlea,
                                    aat_int32        *ActivationFlags,
                                    aat_ascii       *aSerialNumberSuffix,
                                    aat_ascii       *aXFAD,
                                    aat_ascii       *aXERC);

Description

This function generates software Digipass activation data for software Digipass authenticators compliant with the standard one-step activation (in the context of single-device licensing); for more information, refer to the Authentication Suite Server SDK Product Guide. Either an activation code or full activation data (FAD) are generated:

  • The activation code can be used for an offline activation workflow (offline activation mode). This activation code will become an encrypted activation code if the aSharedData and/or aAlea parameters are used.
  • The FAD can be used for an online activation workflow (online activation mode). This FAD will become an encrypted full activation data (XFAD) if the aSharedData and/or aAlea parameters are used.

For software Digipass authenticators based on Digipass SDK 4.0 or later, the activation mode depends on the content of the ActivationFlags input parameter pointer.

For earlier software Digipass authenticators based on the Digipass SDK prior to version 4.0, by default, the activation mode depends on the static vector configuration and content. It can be forced to offline activation mode, setting the appropriate flag in the ActivationFlags input parameter pointer.

This function can also generate:

  • Either an event reactivation counter (ERC), if both the aSharedData and aAlea parameters are set to NULL,
  • Or an encrypted event reactivation counter (XERC), if the aSharedData and/or aAlea parameters are used.

For software Digipass authenticators based on Digipass SDK prior to version 4.0, it is not allowed to use aSharedData and/or aAlea for the offline activation mode.

This function replaces and extends the former AAL2GenActivationCodeEx function. It includes the enhancement of the activation service to allow the Digipass reactivation with event synchronization between the server and the client.

OneSpan recommends using the AAL2GenActivationCodeXErc function for both the first activation and also during reactivation (to synchronize the event counter in case of event-based or time- and event-based Digipass applications). Usage of the former AAL2GenActivationCodeEx function is no longer recommended.

To generate activation data for a software Digipass authenticator using this function, it is mandatory to provide all the corresponding customer authenticator application BLOBs. The function will fail if not all customer authenticator application BLOBs of the related software Digipass authenticators are provided.

Parameters

  Table: Parameters (AAL2GenActivationCodeXErc)
TypeNameUseDescription
TDigipassBlob * [8]DPDataI/OArray of authenticator application BLOB pointers. Upon return from the function call, these BLOBs must be rewritten to the application database to reflect the changes.
aat_int16Appl_countINumber of applications in the authenticator application BLOB array (1 to 8).
TKernelParms * CallParmsIStructure of runtime parameters to use during this function call.
aat_ascii *aStatic VectorInISoftware Digipass parameter settings, up to 4094 characters, null-terminated.
aat_ascii *aSharedDataI

Data used to encrypt the activation data. Up to 512* characters, null-terminated. Set to NULL if no shared data used by the software Digipass activation process.

*Shared data plus alea must not exceed 512 characters.

aat_ascii *aAleaI

Encryption diversifier pseudo-randomly generated. Up to 512* characters. Set to NULL if no alea is used by the software Digipass activation process.

*Shared data plus alea must not exceed 512 characters.

aat_int32 *Activation Flags I

A pointer to an aat_int32 variable that specifies the activation mode used for generating activation data (online or offline activation mode). The aat_int32 variable pointed by ActivationFlags can be either set to 0x0 or 0x1 Table: Possible ActivationFlags pointed values (AAL2GenActivationCodeXErc) lists the possible values for ActivationFlags.

If the ActivationFlags pointer is NULL, the default 0x0 value will be used.

aat_ascii *aSerial NumberSuffixO

String of up to 14+1 null-terminated digits representing the last 7 digits of the Digipass serial number.

14+1 null-terminated digits in case of software Digipass authenticators based on the Digipass SDK prior to version 4.0 (SN Suffix formatted with inserted 0).

7+1 null-terminated digits in case of software Digipass authenticators based on the Digipass SDK 4.0 or later.

The aSerialNumberSuffix buffer must have at least 15 bytes allocated (recommended buffer size is 15 bytes).

aat_ascii *aXFADO

String of up to 4142+1 characters, null-terminated. This parameter holds either the [encrypted] activation code (in case of offline mode) or the [encrypted] full activation data ([X]FAD) (in case of online mode).

The aXFAD buffer must have at least 4143 bytes allocated (recommended buffer size is 4143 bytes).

aat_ascii *aXERCO

String of up to 91+1 characters, null-terminated. If this parameter is NULL, the event reactivation counter will not be generated.

This parameter holds either the event reactivation counter (ERC) (if both the SharedData and Alea parameters are set to NULL) or the encrypted event reactivation counter (XERC) (if the SharedData and/or Alea parameters are not set to NULL.).

If not NULL,the aXERC buffer must have at least 92 bytes allocated (recommended buffer size is 92 bytes).

  Table:  Possible ActivationFlags pointed values (AAL2GenActivationCodeXErc)
FlagValueDescription
ACTV_DEFAULT0x00000000

Online activation mode for software Digipass authenticators based on the Digipass SDK 4.0 or later (function generates an [X]FAD).

The activation mode configured in the static vector for software Digipass authenticators based on the Digipass SDK prior to version 4.0, online or offline (the function generates an [X]FAD or an activation code depending on static vector content).

ACTV_OFFLINE0x00000001Offline activation mode (function generates an [encrypted] activation code).

Return codes

  Table: Return codes (AAL2GenActivationCodeXErc)
CodeMeaningCodeMeaning
0Success569Invalid application name in Digipass data
147Invalid ActivationCode pointer570Invalid static vector version
164Invalid serial number suffix pointer571Invalid application index in static vector
412Invalid checksum572Missing application key type in static vector
413Invalid Base64 format573Serial number suffix not decimal
510Invalid Digipass data pointer574Invalid serial number prefix in SV
537Invalid static vector pointer576Digipass data does not match with SV
543Activation code generation not supported578Invalid BLOB status
545Invalid static vector length579Alea or shared data not allowed
546Invalid activation code format807Serial number not equal
547Alea is too long808Invalid application count value (1 to 8)
548Shared data too long1000Function does not support EMV-CAP
549Alea + shared data too long1103Unlock Version 2 not supported
567Invalid activation flags value1118Unsupported BLOBBLOB
568Invalid DP+ application in Digipass data-1501Memory allocation failed

Cet article vous a-t-il été utile ?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Ozzy, facilitant la découverte de connaissances grâce à l’intelligence conversationnelle