Motorola CA50, Developer & User Manual

Page: 307 / 542

UCA Server Optional APIs 11 - 5
CA50 Device User Authentication Process
The UCA server uses a combination of .NET Web services and .NET aspx pages for the CA50 device user
Authentication Process.
Process Flow
Upon startup, the CA50 client calls the DeviceRegistration method in the DeviceManagement Web Service to
register with the UCA system. The DeviceManagement Web Service calls the AuthenticateMAC method in the
Authentication Web Service to potentially authenticate the device MAC address and determine the next step for the
UCA Authentication Process. The MAC level authentication is only attempted if the feature is enabled in the
system settings. In most cases this is not used because of the operational work involved in tracking the MAC
address of each device in an enterprise.
MAC authentication is enabled by a setting in the UCA database (DB). If enabled, the AuthenticateMAC method
attempts to match the MAC of the device as an external user ID to the entries in the UCA B_User table. To convey
the status of the authentication attempt and the next step in the overall UCA Authentication Process, the
AuthenticateMAC method returns a class object (AuthenticateResponse) that contains the member variables:
authenticated (boolean)
continueOn (boolean)
token (string) - Used to get a URL from the UCA DB
The DeviceRegistration method evaluates the return values from AuthenticateMAC in the following ways.
Example 1 - Authentication Fails, Process Ends
authenticated = false
continueOn = false
token (string) = ""
Return values in this example indicate that the device is not authenticated and the UCA Authentication
Process should not continue. The device failed authentication at the MAC level and the process ends.
Example 2 - Authentication Successful, Process Ends
authenticated = true
continueOn = false
token (string) = ""
Return values in this example indicate that the device is authenticated and the overall UCA Authentication
Process is complete. The device passed MAC authentication. This is sufficient. and the process ends.