cgl.narada.service.security
Interface KeyManagementService

public interface KeyManagementService

The key management service provides a set of operations that are useful to enable message level encryptions. $Date$ $Revision$

Method Summary

void	addTemplateToCompromisedList(int template) When a template is added to the list of compromised templates, a new key-pair needs to be regenerated for the template.
void	addUserToCompromisedList(int client) When a user is added to the list of compromised users, all templates that the user was registered to need to have regenerated keys.
Certificate	generateCertificate(int entityId, String otherInfo) A method that generates certificates for a given user
SecretKey	generateTemplateKey(int templateId, String algorithm, int keyLength, Certificate credentials) This method is called the first time we try to secure a template.
SecretKey	getTemplateKey(int templateId, Certificate credentials) Gets the Secret key associated with a given template
void	registerPersonalPublicKey(int entityId, PublicKey publicKey) This method allows a subscriber/publisher to register their personal public keys with the KMC, which would then be used to encrypt template key exchanges and other functions.

Method Detail

registerPersonalPublicKey

void registerPersonalPublicKey(int entityId,
                               PublicKey publicKey)
                               throws ServiceException

This method allows a subscriber/publisher to register their personal public keys with the KMC, which would then be used to encrypt template key exchanges and other functions.

Throws:

ServiceException

generateCertificate

Certificate generateCertificate(int entityId,
                                String otherInfo)
                                throws ServiceException

A method that generates certificates for a given user

Throws:

ServiceException

getTemplateKey

SecretKey getTemplateKey(int templateId,
                         Certificate credentials)
                         throws ServiceException

Gets the Secret key associated with a given template

Throws:

ServiceException

generateTemplateKey

SecretKey generateTemplateKey(int templateId,
                              String algorithm,
                              int keyLength,
                              Certificate credentials)
                              throws ServiceException

This method is called the first time we try to secure a template.

Throws:

ServiceException

addUserToCompromisedList

void addUserToCompromisedList(int client)

When a user is added to the list of compromised users, all templates that the user was registered to need to have regenerated keys. Affected clients need to be also notified about this change.

addTemplateToCompromisedList

void addTemplateToCompromisedList(int template)

When a template is added to the list of compromised templates, a new key-pair needs to be regenerated for the template. Affected clients need to be also notified about this change and the appropriate key should be routed to them securely.