AAL2VerifyDeviceCodeEx

Availability: Authentication Suite Server SDK 4.0.2 and later

Service: Digipass Multi-Device Activation

Function prototype

aat_int32 AAL2VerifyDeviceCodeEx ( TDigipassBlob *DPMAData, 
                                   TKernelParms *CallParms,
                                   aat_ascii *Challenge,
                                   aat_ascii *SignedMessage,
                                   aat_ascii *DeviceCode,
                                   aat_ascii *DeviceID,
                                   aat_int32 *DeviceIDLength, 
                                   aat_int32 *pDeviceType );

Description

AAL2VerifyDeviceCodeEx() overloads AAL2VerifyDeviceCode(), exposing a new SignedMessage parameter to provide device binding support for FIDO2–capable authenticators, such as DIGIPASS FX2.

This function verifies the device code provided by the Digipass device using the master activation application data. In case of SUCCESS it also extracts the following:

• Digipass device ID
• Digipass device type

It is only applicable to hardware or software authenticators compliant with the multi-device two-step activation (in context of multi-device licensing).

It uses different parameters for the validation, depending on the mode:

• FIDO2 binding mode. In case of a bound FIDO2 device, the signed message (Activation Message 1 generated with the FIDO2 public key and challenge using  AAL2GenMessageActivation1Ex()) is used to validate the device code.  
• Unbound mode. In any other case, if a challenge has been used to generate the Activation Message 1 (using AAL2GenMessageActivation1Ex()) received by the authenticator, the same challenge is used to validate the device code.

If challenge is not used, the kernel parameter CheckChallenge has to be set to 0 to disable the challenge checking.

Score-based Digipass

For Digipass devices that integrate the score-based algorithm, Authentication Suite Server SDK performs a score-based authentication to validate the device code. This allows retrieving the Digipass scoring value. Once Authentication Suite Server SDK has successfully validated the device code, it returns either SUCCESS or SUCCESS with the relevant scoring warning code. See the list of return codes in Table: Return codes (AAL2VerifyDeviceCodeEx) for more details.

Parameters

Return codes