AAL2ProcDeriveTokenBlobsRpl
  • 22 Jan 2025
  • 2 Minutes à lire
  • Sombre
    Lumière
  • PDF

AAL2ProcDeriveTokenBlobsRpl

  • Sombre
    Lumière
  • PDF

The content is currently unavailable in French. You are viewing the default English version.
Résumé de l’article

Function prototype

aat_int32 AAL2ProcDeriveTokenBlobsRpl (
                                       aat_byte        *InReply,
                                       aat_int32        ReplySize,
                                       TDigipassBlob   *DPData [8]);

Description

This function processes a reply from the HSM to a Software Digipass data derivation command which has been generated with AAL2GenDeriveTokenBlobsCmd.

The software Digipass data derivation on the HSM is identical to the functionality available with the Authentication Suite Server SDK Software Digipass Derivation Service. For information on the associated functions, refer to the Authentication Suite Server SDK C-C++ Programmer's Guide.

Score-based Digipass

For Digipass devices that integrate the score-based algorithm, the HSM module performs a score-based authentication to validate the derivation code. This allows retrieving the Digipass scoring value. Once the HSM module has successfully validated the BLOBs, it returns either SUCCESS or SUCCESS with the relevant scoring warning code. See the list of return codes in Table: Return codes (AAL2ProcDeriveTokenBlobsRpl) for more details.

This function serializes an important amount of data. The InReply buffer must be allocated with a sufficient size. For more information about the allocation of the Cmd and InReply buffers, refer to Cmd and InReply buffers allocation.

Parameters

  Table: Parameters (AAL2ProcDeriveTokenBlobsRpl)
TypeNameUseDescription
aat_byte *InReplyI

Up to 1578 bytes that contain the DERIVE TOKEN BLOBS command type and the output data from the derive token BLOBs function on the HSM:

  • Command type - 2 bytes
  • One or more authenticator application BLOBs- up to 8x192 bytes
  • Return code - 4 bytes

Plus 36 bytes for Authentication Suite Server SDK internal use.

aat_int32ReplySizeIThe length of the InReply message.
TDigipassBlob * [8]DPData O

Array of authenticator application BLOB pointers. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.

Return codes

  Table:  Return codes (AAL2ProcDeriveTokenBlobsRpl)
CodeMeaningCodeMeaning
0Success913Invalid HSM key property
10001Success with context warning*951Invalid HSM key type for HSM decryption
10002Success with user warning*1009Invalid TLV total length
10003Success with user & context warning*1018Invalid TLV item pointer
10004Success with platform warning*1019Missing mandatory TLV item
10005Success with platform & context warning*1025Data buffer too small
10006Success with platform & user warning*1039Invalid response length with DP algorithm
10007Success with platform & user & context warning*1040Invalid host code length with DP algorithm
1Code not verified1103Unlock Version 2 not supported
131Missing required challenge1109Invalid derivation code
132Unsupported token type1111Invalid derivation code lengthInvalid derivation code length
140Challenge corrupted1112Invalid character in derivation code
201Code replay attempt1113Derivation code check digit is wrong
202Identification error threshold reached1114Invalid derivation code format parameter
205Inactive days reached1118Unsupported BLOB
208Application disabled-101Challenge too short
272Invalid wrapped key-102Challenge too long
412Invalid checksum (software)-103Challenge check digit wrong
413Invalid Base64 format-105Challenge minimum length not allowed
414Invalid checksum (HSM)-106Challenge maximum length not allowed
510Invalid Digipass data pointer-107Challenge number wrong
600Invalid Gordian root information-108Challenge character invalid
601Invalid Gordian today information-201Response length out of bounds
602Invalid Gordian tomorrow information-202Response too short
603Invalid Gordian stimulus information-203Response too long
701Invalid Input Buffer PointerInvalid input buffer pointer-205Response character not decimal
807Serial number not equal-206Response character not hexadecimal
808Invalid application count value-207Response character set not specified
910Invalid HSM command in reply-1501Memory allocation failed
912HSM invalid BLOB status  

* Specific score-based authentication codes; for more information, refer to Score-based Digipass.


Cet article vous a-t-il été utile ?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Ozzy, facilitant la découverte de connaissances grâce à l’intelligence conversationnelle