myvtm/Module/mod_accessauth/mod_AccessAuth.h

#pragma once
#include "SpBase.h"
#ifdef RVC_OS_WIN
//#include "RVCCrypt.h"
#endif // RVC_OS_WIN
#include "AccessAuthorization_server_g.h"
using namespace AccessAuthorization;

#include "AccessAuthFSM.h"

#define KEY_SIZE 16
#define BUF_SIZE 256

#define DEFALT_WAIT_PINPAD_MS 0
#define INTERVAL_WAIT_PINPAD_MS 200

int HexBuf2StrBuf(PBYTE hexBuf, char** strBuf, DWORD len);
int StrBuf2HexBuf(LPCTSTR strBuf, PBYTE* hexBuf);

class CAccessAuthEntity;

class CAccessAuthSession : public AccessAuthService_ServerSessionBase
{
public:
	CAccessAuthSession(CAccessAuthEntity* pEntity) : m_pEntity(pEntity) {}
	virtual ~CAccessAuthSession() {}

	virtual void Handle_Regist(SpOnewayCallContext<AccessAuthService_Regist_Info>::Pointer ctx);
	virtual void Handle_UpdateWK(SpOnewayCallContext<AccessAuthService_UpdateWK_Info>::Pointer ctx);
	virtual void Handle_InitializeNew(SpReqAnsContext<AccessAuthService_InitializeNew_Req, AccessAuthService_InitializeNew_Ans>::Pointer ctx);
	virtual void Handle_InitDev(SpReqAnsContext<AccessAuthService_InitDev_Req, AccessAuthService_InitDev_Ans>::Pointer ctx);
	virtual void Handle_GetNetMsg(SpReqAnsContext<AccessAuthService_GetNetMsg_Req, AccessAuthService_GetNetMsg_Ans>::Pointer ctx);
private:
	CAccessAuthEntity* m_pEntity;
};

class CAccessAuthEntity : public CEntityBase, public ISysVarListener
{
public:
	CAccessAuthEntity()
	{
		m_eErrNum = Error_Succeed;
		m_iGetTermSysInfo = 0;
		waitPinPadMS = 0;
	}
	virtual ~CAccessAuthEntity()
	{
	}

	virtual const char* GetEntityName() const { return "AccessAuthorization"; }
	virtual bool IsService()const { return true; }

	virtual void OnStarted();
	virtual void OnPreStart(CAutoArray<CSimpleStringA> strArgs, CSmartPointer<ITransactionContext> pTransactionContext);
	virtual void OnPreClose(EntityCloseCauseEnum eCloseCause, CSmartPointer<ITransactionContext> pTransactionContext);
	virtual void OnSysVarEvent(const char* pszKey, const char* pszValue, const char* pszOldValue, const char* pszEntityName);

	virtual CServerSessionBase* OnNewSession(const char* /*pszRemoteEntityName*/, const char* /*pszClass*/)
	{
		return new CAccessAuthSession(this);
	}

	virtual void OnPrePause(CSmartPointer<ITransactionContext> pTransactionContext)
	{
		ErrorCodeEnum result(Error_Succeed);
		pTransactionContext->SendAnswer(result);
	}

	virtual void OnPreContinue(CSmartPointer<ITransactionContext> pTransactionContext)
	{
		pTransactionContext->SendAnswer(Error_Succeed);
	}

	// 开始准入
	ErrorCodeEnum Regist();
	void UpdateWK();

	string ByteArrayToHexStr(BYTE* pBuf, int nBufLen);

	// 生成SM2密钥对
	DWORD CreateSM2KeyPair(CBlob& pubKey, CBlob& priKey);

	// 保存密钥对到令牌实体
	DWORD SaveSM2KeyPair(const CBlob& pubKey, const CBlob& priKey);

	// 保存Token和共享会话密钥到令牌实体
	ErrorCodeEnum SaveTokenAndSharedSK(const CBlob& token, const CBlob& sharedSK);

	// 是否使用PinPad
	bool HasPinPad();
	// 机型是否配置密码键盘
	bool IsMachineTypeConfigurePinPad(CSimpleStringA strMachineType);

	int GetPinPadCapability();

	// 保存会话密钥
	bool SaveAuthKey(BYTE* pKey);

	// 调用指定密钥加密
	ErrorCodeEnum EncryptDataWithKey(const CBlob& raw, CBlob& enc, BYTE* key);

	bool GetTerminalFingerPrint(BYTE* pBuf, int& nBufLen);
	bool GetTerminalPublicKey(BYTE* pBuf, int& nBufLen, string& pubkey);

	void SetAuthErrMsg(const char* pszErrMsg) { m_strAuthErrMsg = pszErrMsg; }
	const char* GetAuthErrMsg() { return m_strAuthErrMsg; }

	// 获取密码键盘szModel
	ErrorCodeEnum GetPinPadModel(CSimpleStringA& pinpadModel, bool& bPinPadOnline);

	// 设置时区
	wstring ANSIToUnicode(const string& str);
	BOOL SetLocalTimeZoneByKeyName(const TCHAR* szTimeZoneKeyName, BOOL isDaylightSavingTime);

	void printPasswdError(const string& strErrMsg);
	BYTE m_AuthSessionKey[140];
	virtual void OnSelfTest(EntityTestEnum eTestType, CSmartPointer<ITransactionContext> pTransactionContext)
	{
		pTransactionContext->SendAnswer(Error_Succeed);
	}

	void BeginInitMKACS();
	bool SendInitMKReqACS(CInitlizerMKReq& initMKReq);
	CSimpleStringA GetInitUrl()
	{
		return m_strInitUrl;
	}
	void EndInitMK(DWORD rc, const char* pszErrMsg);
	ErrorCodeEnum LoadKeysToPinPadACS(string TMK, string TPK, string EDK, string index, string tpkCheck, string edkCheck);
	DWORD InitDevice(SpReqAnsContext<AccessAuthService_InitDev_Req, AccessAuthService_InitDev_Ans>::Pointer& ctx);
	void GetNetMsg(SpReqAnsContext<AccessAuthService_GetNetMsg_Req, AccessAuthService_GetNetMsg_Ans>::Pointer& ctx);
	DWORD m_eErrNum;
	CSimpleStringA m_strLastErrMsg;
	CSimpleStringA m_strUserID, m_strPassword, m_strInitUrl;
	SpReqAnsContext<AccessAuthService_InitializeNew_Req, AccessAuthService_InitializeNew_Ans>::Pointer m_ctx;
	pair<string, string> GenerateTmkToKMC();
	pair<string, string> EncryptedByPubKey(CSimpleStringA pubKey, bool bNeed04Head = false);

	void GetHardWareInfo();
	CSimpleStringA m_cpuId, m_mainBoardId, m_hardDiskId;
	int GetTermSysInfo() { return m_iGetTermSysInfo; }

	CSimpleStringA m_publicKey;
	CSimpleStringA m_privateKey;

protected:
	CAccessAuthFSM m_FSM;
	CSystemStaticInfo m_info;
	CSimpleStringA m_strAuthErrMsg;

private:
	bool GenerateRandomNum();
	BYTE m_btRam[16], m_btTermSysInfoSM3[32];
	int m_iGetTermSysInfo;//0:初始值，尚未完成获取过程 1:成功 -1:失败
	int waitPinPadMS;
};