AAL2ProcSyncTokenAndHostRpl
  • 22 Jan 2025
  • 1 Minute à lire
  • Sombre
    Lumière
  • PDF

AAL2ProcSyncTokenAndHostRpl

  • Sombre
    Lumière
  • PDF

The content is currently unavailable in French. You are viewing the default English version.
Résumé de l’article

Function prototype

aat_int32 AAL2ProcSyncTokenAndHostRpl(
                                      aat_byte        *InReply,
                                      aat_int32       ReplySize,
                                      TDigipassBlob   *DPData);

Description

This function processes a reply from the HSM after to a command which has been generated either with AAL2GenSyncTokenAndHostCmd or AAL2GenSyncTokenAndHostCmdEx.

The Digipass token and host synchronization on the HSM is identical to the functionality available with the Authentication Suite Server SDK Software Digipass Management Service. For information on the associated functions, refer to the Authentication Suite Server SDK C-C++ Programmer's Guide.

Score-based Digipass

For Digipass devices that integrate the score-based algorithm, the HSM module performs a score-based authentication which allows retrieving the Digipass scoring value. Once the HSM module has successfully validated the two consecutive passwords, it returns either SUCCESS or SUCCESS with the relevant scoring warning code. See the return codes in Table: Return codes (AAL2ProcSyncTokenAndHostRpl) for more details.

Parameters

  Table: Parameters (AAL2ProcSyncTokenAndHostRpl)
TypeNameUseDescription
aat_byte *InReplyI

Up to 206 bytes that contain the SYNC TOKEN AND HOST command type and the output data from the verify password function on the HSM:

  • Command type - 2 bytes
  • An authenticator application BLOB - 192 bytes
  • Return code - 4 bytes

Plus 8 bytes for Authentication Suite Server SDK internal use.

aat_int32ReplySizeIThe length of the InReply message.
TDigipassBlob *DPDataO

authenticator application BLOB. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.

Return codes

  Table:  Return codes (AAL2ProcSyncTokenAndHostRpl)
CodeMeaningCodeMeaning
0Success802Change password mandatory
10001Success with context warning*803New password too short
10002Success with user warning*804New password too long
10003Success with user & context warning*908Invalid key ID specified to decrypt the BLOB
10004Success with platform warning*910Invalid command type in reply
10005Success with platform & context warning *912HSM Invalid BLOB Status
10006Success with platform & user warning*913Invalid HSM key property
10007Success with platform & user & context warning*951Invalid HSM key type for HSM decryption
1Code not verified1009Invalid TLV total length
2Static password validation failed1018Invalid TLV item pointer
131Missing required challenge1019Missing mandatory TLV item
132Unsupported token type1025Data buffer too small
140Challenge corrupted1039Invalid response length with DP algorithm
201Code replay attempt1040Invalid host code length with DP algorithm
202Identification error threshold reached1118Unsupported BLOB
205Inactive days reached-101Challenge too short
208Application disabled1103Unlock Version 2 not supported
272Invalid wrapped key-102Challenge too long
412Invalid checksum (software)-103Challenge check digit wrong
413Invalid Base64 format-104Challenge character not decimal
414Invalid checksum (HSM)-108Challenge character invalid
510Invalid Digipass data pointer-201Response length out of bounds
600Invalid Gordian root information-202Response too short
601Invalid Gordian today information-203Response too long
602Invalid Gordian tomorrow information-204Response check digit wrong
603Invalid Gordian stimulus information-205Response character not decimal
701Invalid input buffer pointer-206Response character not hexadecimal

* Specific score-based authentication codes; for more information, refer to  Score-based Digipass.


Cet article vous a-t-il été utile ?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Ozzy, facilitant la découverte de connaissances grâce à l’intelligence conversationnelle