AAL2GenActivationDataRndKey
- 22 Jan 2025
- 4 Minutes à lire
- SombreLumière
- PDF
AAL2GenActivationDataRndKey
- Mis à jour le 22 Jan 2025
- 4 Minutes à lire
- SombreLumière
- PDF
The content is currently unavailable in French. You are viewing the default English version.
Résumé de l’article
Avez-vous trouvé ce résumé utile ?
Merci pour vos commentaires
Function prototype
aat_int32 AAL2GenActivationDataRndKey (
TDigipassBlob *DPData[8],
aat_int16 *Appl_Count,
TKernelParms *CallParms,
aat_ascii *aStaticVectorIn,
aat_ascii *aSharedData,
aat_ascii *aAlea,
aat_int32 *ActivationFlags,
aat_ascii *aSerialNumberSuffix,
aat_ascii *aXFAD,
aat_ascii *aXERC);
Description
This function generates software Digipass activation data with randomDigipass key generation for software Digipass authenticators compliant with the standard one-step activation (in the context of single-device licensing); for more informaion, refer to the Authentication Suite Server SDK Product Guide. Either an activation code or full activation data (FAD) are generated:
- The activation code can be used for an offline activation workflow (offline activation mode). This activation code will become an encrypted activation code if the aSharedData and/or aAlea parameters are used.
- The FAD can be used for an online activation workflow (online activation mode). This FAD will become an encrypted full activation data (XFAD) if the aSharedData and/or aAlea parameters are used.
For software Digipass authenticators based on Digipass SDK 4.0 or later, the activation mode depends on the content of the ActivationFlags input parameter pointer.
For earlier software Digipass authenticators based on the Digipass SDK prior to version 4.0, by default, the activation mode depends on the static vector configuration and content. It can be forced to offline activation mode, setting the appropriate flag in the ActivationFlags input parameter pointer.
This function can also generate:
- Either an event reactivation counter (ERC), if both the aSharedData and aAlea parameters are set to NULL, or
- An encrypted event reactivation counter (XERC), if the aSharedData and/or aAlea parameters are used.
For software Digipass authenticators based on Digipass SDK prior to version 4.0, it is not allowed to use aSharedData and/or aAlea for the offline activation mode.
This function extends the former AAL2GenActivationCodeXErc function, adding the generation of a new random Digipass key.
To generate activation data for a software Digipass authenticator using this function, it is mandatory to provide all the corresponding customer authenticator application BLOBs. The function will fail if not all customer authenticator application BLOBs of the related software Digipass authenticators are provided.
In addition, a new random key will be generated for the software Digipass authenticator and will replace the previous one.
The generated [encrypted] activation code (or [X]FAD) will be related to the new software Digipass key, and the authenticator application BLOBs will be updated with the new software Digipass key.
Buffers must be mandatorily allocated for aSerialNumberSuffix, aXFAD, and aXERC.
Parameters
| Type | Name | Use | Description |
|---|---|---|---|
| TDigipassBlob * [8] | DPData | I/O | Array of authenticator application BLOB pointers. Upon return from the function call, these BLOBs must be rewritten to the application database to reflect the changes. |
| aat_int16 | Appl_count | I | Number of applications in the authenticator application BLOB array. (1 to 8). |
| TKernelParms * | CallParms | I | Structure of runtime parameters to use during this function call. |
| aat_ascii * | aStatic VectorIn | I | Software Digipass parameter settings, up to 4094 characters, null-terminated. |
| aat_ascii * | aSharedData | I | Data used to encrypt the activation data. Up to 512* characters, null-terminated. Set to NULL if no shared data used by the software Digipass activation process. *Shared data plus alea must not exceed 512 characters. |
| aat_ascii * | aAlea | I | Encryption diversifier pseudo-randomly generated. Up to 512* characters. Set to NULL if no alea is used by the software Digipass activation process. *Shared data plus alea must not exceed 512 characters. |
| aat_int32 * | Activation Flags | I | Integer value that specifies the activation mode used for generating activation data (online or offline activation mode.) The ActivationFlags value can be either set to 0x0 or 0x1. Table: Possible ActivationFlags pointed values (AAL2GenActivationCodeXErc) lists the possible values for ActivationFlags. |
| aat_ascii * | aSerial NumberSuffix | O | String of up to 14+1 null-terminated digits representing the last 7 digits of the Digipass serial number. 14+1 null-terminated digits in case of software Digipass authenticators based on the Digipass SDK prior to version 4.0 (SN suffix formatted with inserted 0). 7+1 null-terminated digits in case of software Digipass authenticators based on the Digipass SDK 4.0 or later. aSerialNumberSuffix buffer must have at least 15 bytes allocated. |
| aat_ascii * | aXFAD | O | String of up to 4142+1 characters, null-terminated. This parameter holds either the [encrypted] activation code (in case of offline mode) or the [encrypted] full activation data ([X]FAD) (in case of online mode). The aXFAD buffer must have at least 4143 bytes allocated. |
| aat_ascii * | aXERC | O | String of up to 91+1 characters, null-terminated. If this parameter is NULL, the event reactivation counter will not be generated. This parameter holds either the event reactivation counter (ERC) (if both the SharedData and Alea parameters are set to NULL) or the encrypted event reactivation counter (XERC) (if the SharedData and/or Alea parameters are not set to NULL). If not NULL, the aXERC buffer must have at least 92 bytes allocated. |
Return codes
Cet article vous a-t-il été utile ?