SecuGen Registered Device - High Level Overview

SecuGen Registered Device Service and

Management Server

High Level Overview

Version 1.1

July 2017

1 SecuGen India Private Limited.

SecuGen Registered Device - High Level Overview

AUA AUA UIDAI

A C D
SECUGEN Application A ----------- AUTH
C
RD A
ASA SERVER
BA
SERVICE SERVER

BIOMETRIC

DEVICE
SECUGEN UIDAI
B E
MGMT. MGMT.

SERVER SERVER

CLIENT SERVER

A: RD Service API
B: SecuGen Management Server Protocol / API
C: AUA Protocol / API
D: UIDAI Authentication API 2.0
E: UIDAI Registration API

High level diagram showing flow between RD Service, AUA and UIDAI CIDR

2 SecuGen India Private Limited.

SecuGen Registered Device - High Level Overview

A B C

Biometric SecuGen SecuGen

Capture Registered Provider

& Device Management

Signing API Server

https://www.secugenindia.in
(Internal)

USB RD Provider

SecuGen Crypto HSM

Data Store
HU20

A: RD Service API ( TCP ports 11100 - 11120 on Windows / Intents on Android)

B: RD Service Core ( Biometric capture and sign functionality )

C: Provider Management Server accessed over HTTPS ( port 443 )

SecuGen RD Service and Management Server - High Level Architecture Diagram

3 SecuGen India Private Limited.

SecuGen Registered Device - High Level Overview

Functions of the Registered Device Service

 Provide a standard API for the AUA application to call

 Register a device via the Provider Management Server.
 Install updates via the Provider Management Server.
 Generate device key pairs and get device certificate issued via the Provider
Management Server.
 Capture one or more instances of user biometric data.
 Sign the biometric data using the device private key.
 Generate the elements of the Auth XML such as Skey, Hmac and Data
 Binds on 'localhost' (127.0.0.1) on any port between 11100 and 11120

Functions of the Provider Management Server

 Register devices on the UIDAI server on behalf of the AUA

 Sign and issue device certificates based on key data sent from the device.
 Manage updates for the registered device service.
 Miscellaneous services for regular registered device operations.
 Binds on www.secugenindia.in port 443 (https)

4 SecuGen India Private Limited.