AAL2VerifyPassword

Function prototype

aat_int32 AAL2VerifyPassword (TDigipassBlob*   DPData,
                              TKernelParms*    CallParms,
                              aat_ascii*       Password,
                              aat_ascii*       Challenge);

Description

This function authenticates the Digipass user by verifying if a given Digipass-generated dynamic password is valid for a specified authenticator application described by its authenticator application BLOB (DPData). Optionally, the previously generated challenge is also passed to this function.

Integration specifics of one-button authenticators (e.g. Digipass GO series)

This function can also be used for static PIN management for Digipass GO devices supporting the server static PIN. In this case, a password may have different formats.

Password formats

• Regular password authentication request: 89574526. No static PIN.
• Same authentication request in combination with static PIN usage: 123489574526. The static PIN is entered before the dynamic password. AAL2VerifyPassword will first evaluate the static PIN and then the dynamic password.
• Same authentication request in combination with static PIN usage and a request for PIN change: 12348957452643214321. The static PIN is entered before the dynamic password, and both the new PIN and new PIN confirmation are entered afterwards. AAL2VerifyPassword will first evaluate the static PIN and then the dynamic password. After this, the request for a PIN change is processed.

For a list of the characters that can be used for the new static password, see Supported new static password charset.

Virtual Mobile Authenticator

If Virtual Mobile Authenticator is supported for the given authenticator application BLOB, this function can be used to perform Virtual Mobile Authenticator one-time password validation.

When both backup and primary authenticator are activated, Authentication Suite Server SDK will automatically detect whether the given dynamic password is from a backup or primary authenticator application. After a successful validation it is possible to retrieve the given dynamic password type (primary/backup) by calling AAL2GetTokenProperty.

Score-based Digipass

For Digipass devices that integrate the score-based algorithm, Authentication Suite Server SDK performs a score-based authentication which allows retrieving the Digipass scoring value. Once Authentication Suite Server SDK has successfully validated the password, it returns either SUCCESS or SUCCESS with the relevant scoring warning code. See the list of return codes in Table: Return codes (AAL2VerifyPassword) for more details.

Parameters

Return codes

* Specific score-based authentication codes; for more information, refer to Score-based Digipass.