| /* |
| * Copyright (C) 2019 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package com.android.car.trust; |
| |
| import static android.car.Car.PERMISSION_CAR_ENROLL_TRUST; |
| import static android.car.trust.CarTrustAgentEnrollmentManager.ENROLLMENT_HANDSHAKE_FAILURE; |
| import static android.car.trust.CarTrustAgentEnrollmentManager.ENROLLMENT_NOT_ALLOWED; |
| |
| import static com.android.car.trust.EventLog.ENCRYPTION_KEY_SAVED; |
| import static com.android.car.trust.EventLog.ENROLLMENT_ENCRYPTION_STATE; |
| import static com.android.car.trust.EventLog.ENROLLMENT_HANDSHAKE_ACCEPTED; |
| import static com.android.car.trust.EventLog.ESCROW_TOKEN_ADDED; |
| import static com.android.car.trust.EventLog.RECEIVED_DEVICE_ID; |
| import static com.android.car.trust.EventLog.REMOTE_DEVICE_CONNECTED; |
| import static com.android.car.trust.EventLog.SHOW_VERIFICATION_CODE; |
| import static com.android.car.trust.EventLog.START_ENROLLMENT_ADVERTISING; |
| import static com.android.car.trust.EventLog.STOP_ENROLLMENT_ADVERTISING; |
| import static com.android.car.trust.EventLog.logEnrollmentEvent; |
| |
| import android.annotation.IntDef; |
| import android.annotation.NonNull; |
| import android.annotation.Nullable; |
| import android.annotation.RequiresPermission; |
| import android.app.ActivityManager; |
| import android.bluetooth.BluetoothDevice; |
| import android.bluetooth.le.AdvertiseCallback; |
| import android.bluetooth.le.AdvertiseSettings; |
| import android.car.encryptionrunner.EncryptionRunner; |
| import android.car.encryptionrunner.EncryptionRunnerFactory; |
| import android.car.encryptionrunner.HandshakeException; |
| import android.car.encryptionrunner.HandshakeMessage; |
| import android.car.encryptionrunner.HandshakeMessage.HandshakeState; |
| import android.car.encryptionrunner.Key; |
| import android.car.trust.ICarTrustAgentBleCallback; |
| import android.car.trust.ICarTrustAgentEnrollment; |
| import android.car.trust.ICarTrustAgentEnrollmentCallback; |
| import android.car.trust.TrustedDeviceInfo; |
| import android.content.Context; |
| import android.content.SharedPreferences; |
| import android.os.IBinder; |
| import android.os.RemoteException; |
| import android.sysprop.CarProperties; |
| import android.util.Log; |
| |
| import com.android.car.BLEStreamProtos.BLEOperationProto.OperationType; |
| import com.android.car.ICarImpl; |
| import com.android.car.R; |
| import com.android.car.Utils; |
| import com.android.car.trust.CarTrustAgentBleManager.DataReceivedListener; |
| import com.android.car.trust.CarTrustAgentBleManager.SendMessageCallback; |
| import com.android.internal.annotations.GuardedBy; |
| import com.android.internal.annotations.VisibleForTesting; |
| |
| import java.io.PrintWriter; |
| import java.lang.annotation.Retention; |
| import java.lang.annotation.RetentionPolicy; |
| import java.security.SignatureException; |
| import java.util.ArrayList; |
| import java.util.HashMap; |
| import java.util.HashSet; |
| import java.util.Iterator; |
| import java.util.LinkedList; |
| import java.util.List; |
| import java.util.Map; |
| import java.util.Queue; |
| import java.util.Set; |
| import java.util.UUID; |
| |
| /** |
| * A service that is part of the CarTrustedDeviceService that is responsible for allowing a |
| * phone to enroll as a trusted device. The enrolled phone can then be used for authenticating a |
| * user on the HU. This implements the {@link android.car.trust.CarTrustAgentEnrollmentManager} |
| * APIs that an app like Car Settings can call to conduct an enrollment. |
| * |
| * @deprecated Enrollment of a trusted device is no longer a supported feature of car service and |
| * these APIs will be removed in the next Android release. |
| */ |
| @Deprecated |
| public class CarTrustAgentEnrollmentService extends ICarTrustAgentEnrollment.Stub implements |
| DataReceivedListener { |
| private static final String TAG = "CarTrustAgentEnroll"; |
| private static final String TRUSTED_DEVICE_ENROLLMENT_ENABLED_KEY = |
| "trusted_device_enrollment_enabled"; |
| @VisibleForTesting |
| static final byte[] CONFIRMATION_SIGNAL = "True".getBytes(); |
| //Arbirary log size |
| private static final int MAX_LOG_SIZE = 20; |
| // This delimiter separates deviceId and deviceInfo, so it has to differ from the |
| // TrustedDeviceInfo delimiter. Once new API can be added, deviceId will be added to |
| // TrustedDeviceInfo and this delimiter will be removed. |
| private static final char DEVICE_INFO_DELIMITER = '#'; |
| |
| // Device name length is limited by available bytes in BLE advertisement data packet. |
| // |
| // BLE advertisement limits data packet length to 31 |
| // Currently we send: |
| // - 18 bytes for 16 chars UUID: 16 bytes + 2 bytes for header; |
| // - 3 bytes for advertisement being connectable; |
| // which leaves 10 bytes. |
| // Subtracting 2 bytes used by header, we have 8 bytes for device name. |
| private static final int DEVICE_NAME_LENGTH_LIMIT = 8; |
| // Limit prefix to 4 chars and fill the rest with randomly generated name. Use random name |
| // to improve uniqueness in paired device name. |
| private static final int DEVICE_NAME_PREFIX_LIMIT = 4; |
| |
| private final CarTrustedDeviceService mTrustedDeviceService; |
| private final CarCompanionDeviceStorage mCarCompanionDeviceStorage; |
| // List of clients listening to Enrollment state change events. |
| private final List<EnrollmentStateClient> mEnrollmentStateClients = new ArrayList<>(); |
| // List of clients listening to BLE state changes events during enrollment. |
| private final List<BleStateChangeClient> mBleStateChangeClients = new ArrayList<>(); |
| private final Queue<String> mLogQueue = new LinkedList<>(); |
| |
| private final CarTrustAgentBleManager mCarTrustAgentBleManager; |
| private CarTrustAgentEnrollmentRequestDelegate mEnrollmentDelegate; |
| |
| private Object mRemoteDeviceLock = new Object(); |
| @GuardedBy("mRemoteDeviceLock") |
| private BluetoothDevice mRemoteEnrollmentDevice; |
| private final Map<Long, Boolean> mTokenActiveStateMap = new HashMap<>(); |
| private String mClientDeviceName; |
| private String mClientDeviceId; |
| private final UUID mEnrollmentClientWriteUuid; |
| private final Context mContext; |
| private String mEnrollmentDeviceName; |
| private SendMessageCallback mSendMessageCallback = this::terminateEnrollmentHandshake; |
| |
| private EncryptionRunner mEncryptionRunner = EncryptionRunnerFactory.newRunner(); |
| private HandshakeMessage mHandshakeMessage; |
| private Key mEncryptionKey; |
| private long mHandle; |
| @VisibleForTesting |
| @HandshakeState |
| int mEncryptionState = HandshakeState.UNKNOWN; |
| // State of last message sent to phone in enrollment process. Order matters with |
| // state being auto-incremented. |
| static final int ENROLLMENT_STATE_NONE = 0; |
| static final int ENROLLMENT_STATE_UNIQUE_ID = 1; |
| static final int ENROLLMENT_STATE_ENCRYPTION_COMPLETED = 2; |
| static final int ENROLLMENT_STATE_HANDLE = 3; |
| |
| /** @hide */ |
| @VisibleForTesting |
| @Retention(RetentionPolicy.SOURCE) |
| @IntDef({ENROLLMENT_STATE_NONE, ENROLLMENT_STATE_UNIQUE_ID, |
| ENROLLMENT_STATE_ENCRYPTION_COMPLETED, ENROLLMENT_STATE_HANDLE}) |
| @interface EnrollmentState { |
| } |
| |
| @VisibleForTesting |
| @EnrollmentState |
| int mEnrollmentState; |
| |
| public CarTrustAgentEnrollmentService(Context context, CarTrustedDeviceService service, |
| CarTrustAgentBleManager bleService) { |
| mContext = context; |
| mTrustedDeviceService = service; |
| mCarTrustAgentBleManager = bleService; |
| mEnrollmentClientWriteUuid = UUID.fromString(context |
| .getString(R.string.enrollment_client_write_uuid)); |
| mCarCompanionDeviceStorage = new CarCompanionDeviceStorage(context); |
| } |
| |
| public synchronized void init() { |
| mCarTrustAgentBleManager.setupEnrollmentBleServer(); |
| mCarTrustAgentBleManager.addDataReceivedListener(mEnrollmentClientWriteUuid, |
| this); |
| } |
| |
| /** |
| * Pass a dummy encryption to generate a dummy key, only for test purpose. |
| */ |
| @VisibleForTesting |
| void setEncryptionRunner(EncryptionRunner dummyEncryptionRunner) { |
| mEncryptionRunner = dummyEncryptionRunner; |
| } |
| |
| public synchronized void release() { |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| client.mListenerBinder.unlinkToDeath(client, 0); |
| } |
| for (BleStateChangeClient client : mBleStateChangeClients) { |
| client.mListenerBinder.unlinkToDeath(client, 0); |
| } |
| mEnrollmentStateClients.clear(); |
| } |
| |
| // Implementing the ICarTrustAgentEnrollment interface |
| |
| /** |
| * Begin BLE advertisement for Enrollment. This should be called from an app that conducts |
| * the enrollment of the trusted device. |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void startEnrollmentAdvertising() { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| if (!mCarCompanionDeviceStorage.getSharedPrefs() |
| .getBoolean(TRUSTED_DEVICE_ENROLLMENT_ENABLED_KEY, true)) { |
| Log.e(TAG, "Trusted Device Enrollment disabled"); |
| dispatchEnrollmentFailure(ENROLLMENT_NOT_ALLOWED); |
| return; |
| } |
| // Stop any current broadcasts |
| mTrustedDeviceService.getCarTrustAgentUnlockService().stopUnlockAdvertising(); |
| stopEnrollmentAdvertising(); |
| |
| logEnrollmentEvent(START_ENROLLMENT_ADVERTISING); |
| addEnrollmentServiceLog("startEnrollmentAdvertising"); |
| mCarTrustAgentBleManager.startEnrollmentAdvertising(getEnrollmentDeviceName(), |
| new AdvertiseCallback() { |
| @Override |
| public void onStartSuccess(AdvertiseSettings settingsInEffect) { |
| super.onStartSuccess(settingsInEffect); |
| onEnrollmentAdvertiseStartSuccess(); |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Successfully started advertising service"); |
| } |
| } |
| |
| @Override |
| public void onStartFailure(int errorCode) { |
| super.onStartFailure(errorCode); |
| Log.e(TAG, "Failed to advertise, errorCode: " + errorCode); |
| onEnrollmentAdvertiseStartFailure(); |
| } |
| }); |
| mEnrollmentState = ENROLLMENT_STATE_NONE; |
| } |
| |
| /** |
| * Stop BLE advertisement for Enrollment |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void stopEnrollmentAdvertising() { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| logEnrollmentEvent(STOP_ENROLLMENT_ADVERTISING); |
| addEnrollmentServiceLog("stopEnrollmentAdvertising"); |
| mCarTrustAgentBleManager.stopEnrollmentAdvertising(); |
| } |
| |
| /** |
| * Called by the client to notify that the user has accepted a pairing code or any out-of-band |
| * confirmation, and send confirmation signals to remote bluetooth device. |
| * |
| * @param device the remote Bluetooth device that will receive the signal. |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void enrollmentHandshakeAccepted(BluetoothDevice device) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| logEnrollmentEvent(ENROLLMENT_HANDSHAKE_ACCEPTED); |
| addEnrollmentServiceLog("enrollmentHandshakeAccepted"); |
| if (device == null || !device.equals(mRemoteEnrollmentDevice)) { |
| Log.wtf(TAG, |
| "Enrollment Failure: device is different from cached remote bluetooth device," |
| + " disconnect from the device. current device is:" + device); |
| mCarTrustAgentBleManager.disconnectRemoteDevice(); |
| return; |
| } |
| mCarTrustAgentBleManager.sendMessage(CONFIRMATION_SIGNAL, |
| OperationType.ENCRYPTION_HANDSHAKE, /* isPayloadEncrypted= */ false, |
| mSendMessageCallback); |
| setEnrollmentHandshakeAccepted(); |
| } |
| |
| /** |
| * Terminate the Enrollment process. To be called when an error is encountered during |
| * enrollment. For example - user pressed cancel on pairing code confirmation or user |
| * navigated away from the app before completing enrollment. |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void terminateEnrollmentHandshake() { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| addEnrollmentServiceLog("terminateEnrollmentHandshake"); |
| // Disconnect from BLE |
| mCarTrustAgentBleManager.disconnectRemoteDevice(); |
| // Remove any handles that have not been activated yet. |
| Iterator<Map.Entry<Long, Boolean>> it = mTokenActiveStateMap.entrySet().iterator(); |
| while (it.hasNext()) { |
| Map.Entry<Long, Boolean> pair = it.next(); |
| boolean isHandleActive = pair.getValue(); |
| if (!isHandleActive) { |
| long handle = pair.getKey(); |
| int uid = mCarCompanionDeviceStorage.getSharedPrefs().getInt(String.valueOf(handle), |
| -1); |
| removeEscrowToken(handle, uid); |
| it.remove(); |
| } |
| } |
| } |
| |
| /* |
| * Returns if there is an active token for the given user and handle. |
| * |
| * @param handle handle corresponding to the escrow token |
| * @param uid user id |
| * @return True if the escrow token is active, false if not |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public boolean isEscrowTokenActive(long handle, int uid) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| if (mTokenActiveStateMap.get(handle) != null) { |
| return mTokenActiveStateMap.get(handle); |
| } |
| return false; |
| } |
| |
| /** |
| * Remove the Token associated with the given handle for the given user. |
| * |
| * @param handle handle corresponding to the escrow token |
| * @param uid user id |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void removeEscrowToken(long handle, int uid) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| mEnrollmentDelegate.removeEscrowToken(handle, uid); |
| addEnrollmentServiceLog("removeEscrowToken (handle:" + handle + " uid:" + uid + ")"); |
| } |
| |
| /** |
| * Remove all Trusted devices associated with the given user. |
| * |
| * @param uid user id |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void removeAllTrustedDevices(int uid) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| for (TrustedDeviceInfo device : getEnrolledDeviceInfosForUser(uid)) { |
| removeEscrowToken(device.getHandle(), uid); |
| } |
| } |
| |
| /** |
| * Enable or disable enrollment of a Trusted device. When disabled, |
| * {@link android.car.trust.CarTrustAgentEnrollmentManager#ENROLLMENT_NOT_ALLOWED} is returned, |
| * when {@link #startEnrollmentAdvertising()} is called by a client. |
| * |
| * @param isEnabled {@code true} to enable; {@code false} to disable the feature. |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void setTrustedDeviceEnrollmentEnabled(boolean isEnabled) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| SharedPreferences.Editor editor = mCarCompanionDeviceStorage.getSharedPrefs().edit(); |
| editor.putBoolean(TRUSTED_DEVICE_ENROLLMENT_ENABLED_KEY, isEnabled); |
| if (!editor.commit()) { |
| Log.wtf(TAG, |
| "Enrollment Failure: Commit to SharedPreferences failed. Enable? " + isEnabled); |
| } |
| } |
| |
| /** |
| * Enable or disable authentication of the head unit with a trusted device. |
| * |
| * @param isEnabled when set to {@code false}, head unit will not be |
| * discoverable to unlock the user. Setting it to {@code true} will enable it |
| * back. |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public void setTrustedDeviceUnlockEnabled(boolean isEnabled) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| mTrustedDeviceService.getCarTrustAgentUnlockService() |
| .setTrustedDeviceUnlockEnabled(isEnabled); |
| } |
| |
| /** |
| * Get the Handles and Device Mac Address corresponding to the token for the current user. The |
| * client can use this to list the trusted devices for the user. |
| * |
| * @param uid user id |
| * @return array of trusted device handles and names for the user. |
| */ |
| @NonNull |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public List<TrustedDeviceInfo> getEnrolledDeviceInfosForUser(int uid) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| Set<String> enrolledDeviceInfos = mCarCompanionDeviceStorage.getSharedPrefs().getStringSet( |
| String.valueOf(uid), new HashSet<>()); |
| List<TrustedDeviceInfo> trustedDeviceInfos = new ArrayList<>(enrolledDeviceInfos.size()); |
| for (String deviceInfoWithId : enrolledDeviceInfos) { |
| TrustedDeviceInfo deviceInfo = extractDeviceInfo(deviceInfoWithId); |
| if (deviceInfo != null) { |
| trustedDeviceInfos.add(deviceInfo); |
| } |
| } |
| return trustedDeviceInfos; |
| } |
| |
| /** |
| * Registers a {@link ICarTrustAgentEnrollmentCallback} to be notified for changes to the |
| * enrollment state. |
| * |
| * @param listener {@link ICarTrustAgentEnrollmentCallback} |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public synchronized void registerEnrollmentCallback(ICarTrustAgentEnrollmentCallback listener) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| if (listener == null) { |
| throw new IllegalArgumentException("Listener is null"); |
| } |
| // If a new client is registering, create a new EnrollmentStateClient and add it to the list |
| // of listening clients. |
| EnrollmentStateClient client = findEnrollmentStateClientLocked(listener); |
| if (client == null) { |
| client = new EnrollmentStateClient(listener); |
| try { |
| listener.asBinder().linkToDeath(client, 0); |
| } catch (RemoteException e) { |
| Log.e(TAG, "Cannot link death recipient to binder ", e); |
| return; |
| } |
| mEnrollmentStateClients.add(client); |
| } |
| } |
| |
| /** |
| * Called after the escrow token has been successfully added to the framework. |
| * |
| * @param token the escrow token which has been added |
| * @param handle the given handle of that token |
| * @param uid the current user id |
| */ |
| void onEscrowTokenAdded(byte[] token, long handle, int uid) { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "onEscrowTokenAdded handle:" + handle + " uid:" + uid); |
| } |
| |
| if (mRemoteEnrollmentDevice == null) { |
| Log.e(TAG, "onEscrowTokenAdded() but no remote device connected!"); |
| removeEscrowToken(handle, uid); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| |
| mTokenActiveStateMap.put(handle, false); |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| try { |
| client.mListener.onEscrowTokenAdded(handle); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onEscrowTokenAdded dispatch failed", e); |
| } |
| } |
| } |
| |
| /** |
| * Called after the escrow token has been successfully removed from the framework. |
| */ |
| void onEscrowTokenRemoved(long handle, int uid) { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "onEscrowTokenRemoved handle:" + handle + " uid:" + uid); |
| } |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| try { |
| client.mListener.onEscrowTokenRemoved(handle); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onEscrowTokenRemoved dispatch failed", e); |
| } |
| } |
| SharedPreferences sharedPrefs = mCarCompanionDeviceStorage.getSharedPrefs(); |
| SharedPreferences.Editor editor = sharedPrefs.edit(); |
| editor.remove(String.valueOf(handle)); |
| Set<String> deviceInfos = sharedPrefs.getStringSet(String.valueOf(uid), new HashSet<>()); |
| Iterator<String> iterator = deviceInfos.iterator(); |
| while (iterator.hasNext()) { |
| String deviceIdAndInfo = iterator.next(); |
| TrustedDeviceInfo info = extractDeviceInfo(deviceIdAndInfo); |
| if (info != null && info.getHandle() == handle) { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Removing trusted device: " + info); |
| } |
| String clientDeviceId = extractDeviceId(deviceIdAndInfo); |
| if (clientDeviceId != null && sharedPrefs.getLong(clientDeviceId, -1) == handle) { |
| editor.remove(clientDeviceId); |
| } |
| iterator.remove(); |
| break; |
| } |
| } |
| editor.putStringSet(String.valueOf(uid), deviceInfos); |
| if (!editor.commit()) { |
| Log.e(TAG, "EscrowToken removed, but shared prefs update failed"); |
| } |
| } |
| |
| /** |
| * @param handle the handle whose active state change |
| * @param isTokenActive the active state of the handle |
| * @param uid id of current user |
| */ |
| void onEscrowTokenActiveStateChanged(long handle, boolean isTokenActive, int uid) { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "onEscrowTokenActiveStateChanged: " + Long.toHexString(handle)); |
| } |
| if (mRemoteEnrollmentDevice == null || !isTokenActive) { |
| if (mRemoteEnrollmentDevice == null) { |
| Log.e(TAG, |
| "Device disconnected before sending back handle. Enrollment incomplete"); |
| } |
| if (!isTokenActive) { |
| Log.e(TAG, "Unexpected: Escrow Token activation failed"); |
| } |
| removeEscrowToken(handle, uid); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| |
| // Avoid storing duplicate info for same device by checking if there is already device info |
| // and deleting it. |
| SharedPreferences sharedPrefs = mCarCompanionDeviceStorage.getSharedPrefs(); |
| if (sharedPrefs.contains(mClientDeviceId)) { |
| removeEscrowToken(sharedPrefs.getLong(mClientDeviceId, -1), uid); |
| } |
| mTokenActiveStateMap.put(handle, isTokenActive); |
| Set<String> deviceInfo = sharedPrefs.getStringSet(String.valueOf(uid), new HashSet<>()); |
| String clientDeviceName; |
| if (mRemoteEnrollmentDevice.getName() != null) { |
| clientDeviceName = mRemoteEnrollmentDevice.getName(); |
| } else if (mClientDeviceName != null) { |
| clientDeviceName = mClientDeviceName; |
| } else { |
| clientDeviceName = mContext.getString(R.string.trust_device_default_name); |
| } |
| StringBuffer log = new StringBuffer() |
| .append("trustedDeviceAdded (id:").append(mClientDeviceId) |
| .append(", handle:").append(handle) |
| .append(", uid:").append(uid) |
| .append(", addr:").append(mRemoteEnrollmentDevice.getAddress()) |
| .append(", name:").append(clientDeviceName).append(")"); |
| addEnrollmentServiceLog(log.toString()); |
| deviceInfo.add(serializeDeviceInfoWithId(new TrustedDeviceInfo(handle, |
| mRemoteEnrollmentDevice.getAddress(), clientDeviceName), mClientDeviceId)); |
| |
| // To conveniently get the devices info regarding certain user. |
| SharedPreferences.Editor editor = sharedPrefs.edit(); |
| editor.putStringSet(String.valueOf(uid), deviceInfo); |
| if (!editor.commit()) { |
| Log.e(TAG, "Writing DeviceInfo to shared prefs Failed"); |
| removeEscrowToken(handle, uid); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| |
| // To conveniently get the user id to unlock when handle is received. |
| editor.putInt(String.valueOf(handle), uid); |
| if (!editor.commit()) { |
| Log.e(TAG, "Writing (handle, uid) to shared prefs Failed"); |
| removeEscrowToken(handle, uid); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| |
| // To check if the device has already been mapped to a handle |
| editor.putLong(mClientDeviceId, handle); |
| if (!editor.commit()) { |
| Log.e(TAG, "Writing (identifier, handle) to shared prefs Failed"); |
| removeEscrowToken(handle, uid); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Sending handle: " + handle); |
| } |
| mHandle = handle; |
| mCarTrustAgentBleManager.sendMessage( |
| mEncryptionKey.encryptData(Utils.longToBytes(handle)), |
| OperationType.CLIENT_MESSAGE, /* isPayloadEncrypted= */ true, |
| mSendMessageCallback); |
| } |
| |
| void onEnrollmentAdvertiseStartSuccess() { |
| for (BleStateChangeClient client : mBleStateChangeClients) { |
| try { |
| client.mListener.onEnrollmentAdvertisingStarted(); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onAdvertiseSuccess dispatch failed", e); |
| } |
| } |
| } |
| |
| void onEnrollmentAdvertiseStartFailure() { |
| for (BleStateChangeClient client : mBleStateChangeClients) { |
| try { |
| client.mListener.onEnrollmentAdvertisingFailed(); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onAdvertiseSuccess dispatch failed", e); |
| } |
| } |
| } |
| |
| /** |
| * Called when a device has been connected through bluetooth |
| * |
| * @param device the connected device |
| */ |
| void onRemoteDeviceConnected(BluetoothDevice device) { |
| logEnrollmentEvent(REMOTE_DEVICE_CONNECTED); |
| addEnrollmentServiceLog("onRemoteDeviceConnected (addr:" + device.getAddress() + ")"); |
| resetEncryptionState(); |
| mHandle = 0; |
| synchronized (mRemoteDeviceLock) { |
| mRemoteEnrollmentDevice = device; |
| } |
| for (BleStateChangeClient client : mBleStateChangeClients) { |
| try { |
| client.mListener.onBleEnrollmentDeviceConnected(device); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onRemoteDeviceConnected dispatch failed", e); |
| } |
| } |
| mCarTrustAgentBleManager.stopEnrollmentAdvertising(); |
| } |
| |
| void onRemoteDeviceDisconnected(BluetoothDevice device) { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Device Disconnected: " + device.getAddress() + " Enrollment State: " |
| + mEnrollmentState + " Encryption State: " + mEncryptionState); |
| } |
| addEnrollmentServiceLog("onRemoteDeviceDisconnected (addr:" + device.getAddress() + ")"); |
| addEnrollmentServiceLog( |
| "Enrollment State: " + mEnrollmentState + " EncryptionState: " + mEncryptionState); |
| resetEncryptionState(); |
| mHandle = 0; |
| synchronized (mRemoteDeviceLock) { |
| mRemoteEnrollmentDevice = null; |
| } |
| for (BleStateChangeClient client : mBleStateChangeClients) { |
| try { |
| client.mListener.onBleEnrollmentDeviceDisconnected(device); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onRemoteDeviceDisconnected dispatch failed", e); |
| } |
| } |
| } |
| |
| /** |
| * Called when data is received during enrollment process. |
| * |
| * @param value received data |
| */ |
| @Override |
| public void onDataReceived(byte[] value) { |
| if (mEnrollmentDelegate == null) { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Enrollment Delegate not set"); |
| } |
| return; |
| } |
| switch (mEnrollmentState) { |
| case ENROLLMENT_STATE_NONE: |
| if (!CarTrustAgentValidator.isValidEnrollmentDeviceId(value)) { |
| Log.e(TAG, "Device id rejected by validator."); |
| return; |
| } |
| notifyDeviceIdReceived(value); |
| logEnrollmentEvent(RECEIVED_DEVICE_ID); |
| break; |
| case ENROLLMENT_STATE_UNIQUE_ID: |
| try { |
| processInitEncryptionMessage(value); |
| } catch (HandshakeException e) { |
| Log.e(TAG, "HandshakeException during set up of encryption: ", e); |
| } |
| break; |
| case ENROLLMENT_STATE_ENCRYPTION_COMPLETED: |
| notifyEscrowTokenReceived(value); |
| break; |
| case ENROLLMENT_STATE_HANDLE: |
| // only activated handle can be sent to the connected remote device. |
| dispatchEscrowTokenActiveStateChanged(mHandle, true); |
| mCarTrustAgentBleManager.disconnectRemoteDevice(); |
| break; |
| default: |
| // Should never get here |
| break; |
| } |
| } |
| |
| void onClientDeviceNameRetrieved(String deviceName) { |
| mClientDeviceName = deviceName; |
| } |
| |
| private void notifyDeviceIdReceived(byte[] id) { |
| UUID deviceId = Utils.bytesToUUID(id); |
| if (deviceId == null) { |
| Log.e(TAG, "Invalid device id sent"); |
| return; |
| } |
| mClientDeviceId = deviceId.toString(); |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Received device id: " + mClientDeviceId); |
| } |
| UUID uniqueId = mCarCompanionDeviceStorage.getUniqueId(); |
| if (uniqueId == null) { |
| Log.e(TAG, "Cannot get Unique ID for the IHU"); |
| resetEnrollmentStateOnFailure(); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Sending device id: " + uniqueId.toString()); |
| } |
| mCarTrustAgentBleManager.sendMessage( |
| Utils.uuidToBytes(uniqueId), OperationType.CLIENT_MESSAGE, |
| /* isPayloadEncrypted= */ false, |
| mSendMessageCallback); |
| mEnrollmentState++; |
| } |
| |
| private void notifyEscrowTokenReceived(byte[] token) { |
| try { |
| mEnrollmentDelegate.addEscrowToken( |
| mEncryptionKey.decryptData(token), ActivityManager.getCurrentUser()); |
| mEnrollmentState++; |
| logEnrollmentEvent(ESCROW_TOKEN_ADDED); |
| } catch (SignatureException e) { |
| Log.e(TAG, "Could not decrypt escrow token", e); |
| } |
| } |
| |
| /** |
| * Processes the given message as one that will establish encryption for secure communication. |
| * |
| * <p>This method should be called continually until {@link #mEncryptionState} is |
| * {@link HandshakeState#FINISHED}, meaning an secure channel has been set up. |
| * |
| * @param message The message received from the connected device. |
| * @throws HandshakeException If an error was encountered during the handshake flow. |
| */ |
| private void processInitEncryptionMessage(byte[] message) throws HandshakeException { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Processing init encryption message."); |
| } |
| switch (mEncryptionState) { |
| case HandshakeState.UNKNOWN: |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Responding to handshake init request."); |
| } |
| |
| mHandshakeMessage = mEncryptionRunner.respondToInitRequest(message); |
| mEncryptionState = mHandshakeMessage.getHandshakeState(); |
| mCarTrustAgentBleManager.sendMessage( |
| mHandshakeMessage.getNextMessage(), |
| OperationType.ENCRYPTION_HANDSHAKE, /* isPayloadEncrypted= */ false, |
| mSendMessageCallback); |
| |
| logEnrollmentEvent(ENROLLMENT_ENCRYPTION_STATE, mEncryptionState); |
| break; |
| |
| case HandshakeState.IN_PROGRESS: |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Continuing handshake."); |
| } |
| |
| mHandshakeMessage = mEncryptionRunner.continueHandshake(message); |
| mEncryptionState = mHandshakeMessage.getHandshakeState(); |
| |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Updated encryption state: " + mEncryptionState); |
| } |
| |
| // The state is updated after a call to continueHandshake(). Thus, need to check |
| // if we're in the next stage. |
| if (mEncryptionState == HandshakeState.VERIFICATION_NEEDED) { |
| showVerificationCode(); |
| return; |
| } |
| mCarTrustAgentBleManager.sendMessage( |
| mHandshakeMessage.getNextMessage(), OperationType.ENCRYPTION_HANDSHAKE, |
| /* isPayloadEncrypted= */ false, mSendMessageCallback); |
| break; |
| case HandshakeState.VERIFICATION_NEEDED: |
| Log.w(TAG, "Encountered VERIFICATION_NEEDED state when it should have been " |
| + "transitioned to after IN_PROGRESS."); |
| // This case should never happen because this state should occur right after |
| // a call to "continueHandshake". But just in case, call the appropriate method. |
| showVerificationCode(); |
| break; |
| |
| case HandshakeState.FINISHED: |
| // Should never reach this case since this state should occur after a verification |
| // code has been accepted. But it should mean handshake is done and the message |
| // is one for the escrow token. |
| notifyEscrowTokenReceived(message); |
| break; |
| |
| default: |
| Log.w(TAG, "Encountered invalid handshake state: " + mEncryptionState); |
| break; |
| } |
| } |
| |
| private void showVerificationCode() { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "showVerificationCode(): " + mHandshakeMessage.getVerificationCode()); |
| } |
| |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| try { |
| client.mListener.onAuthStringAvailable(mRemoteEnrollmentDevice, |
| mHandshakeMessage.getVerificationCode()); |
| } catch (RemoteException e) { |
| Log.e(TAG, "Broadcast verification code failed", e); |
| } |
| } |
| logEnrollmentEvent(SHOW_VERIFICATION_CODE); |
| } |
| |
| /** |
| * Reset the whole enrollment state. Disconnects the peer device and removes any escrow token |
| * that has not been activated. |
| * |
| * <p>This method should be called from any stage in the middle of enrollment where we |
| * encounter a failure. |
| */ |
| private void resetEnrollmentStateOnFailure() { |
| terminateEnrollmentHandshake(); |
| resetEncryptionState(); |
| } |
| |
| /** |
| * Resets the encryption status of this service. |
| * |
| * <p>This method should be called each time a device connects so that a new handshake can be |
| * started and encryption keys exchanged. |
| */ |
| private void resetEncryptionState() { |
| mEncryptionRunner = EncryptionRunnerFactory.newRunner(); |
| mHandshakeMessage = null; |
| mEncryptionKey = null; |
| mEncryptionState = HandshakeState.UNKNOWN; |
| mEnrollmentState = ENROLLMENT_STATE_NONE; |
| } |
| |
| private synchronized void setEnrollmentHandshakeAccepted() { |
| if (mEncryptionRunner == null) { |
| Log.e(TAG, "Received notification that enrollment handshake was accepted, " |
| + "but encryption was never set up."); |
| return; |
| } |
| HandshakeMessage message; |
| try { |
| message = mEncryptionRunner.verifyPin(); |
| } catch (HandshakeException e) { |
| Log.e(TAG, "Error during PIN verification", e); |
| resetEnrollmentStateOnFailure(); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| |
| if (message.getHandshakeState() != HandshakeState.FINISHED) { |
| Log.e(TAG, "Handshake not finished after calling verify PIN. Instead got state: " |
| + message.getHandshakeState()); |
| return; |
| } |
| |
| mEncryptionState = HandshakeState.FINISHED; |
| mEncryptionKey = message.getKey(); |
| if (!mCarCompanionDeviceStorage.saveEncryptionKey(mClientDeviceId, |
| mEncryptionKey.asBytes())) { |
| resetEnrollmentStateOnFailure(); |
| dispatchEnrollmentFailure(ENROLLMENT_HANDSHAKE_FAILURE); |
| return; |
| } |
| logEnrollmentEvent(ENCRYPTION_KEY_SAVED); |
| mEnrollmentState++; |
| } |
| |
| /** |
| * Iterates through the list of registered Enrollment State Change clients - |
| * {@link EnrollmentStateClient} and finds if the given client is already registered. |
| * |
| * @param listener Listener to look for. |
| * @return the {@link EnrollmentStateClient} if found, null if not |
| */ |
| @Nullable |
| private EnrollmentStateClient findEnrollmentStateClientLocked( |
| ICarTrustAgentEnrollmentCallback listener) { |
| IBinder binder = listener.asBinder(); |
| // Find the listener by comparing the binder object they host. |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| if (client.isHoldingBinder(binder)) { |
| return client; |
| } |
| } |
| return null; |
| } |
| |
| /** |
| * Unregister the given Enrollment State Change listener |
| * |
| * @param listener client to unregister |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public synchronized void unregisterEnrollmentCallback( |
| ICarTrustAgentEnrollmentCallback listener) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| if (listener == null) { |
| throw new IllegalArgumentException("Listener is null"); |
| } |
| |
| EnrollmentStateClient client = findEnrollmentStateClientLocked(listener); |
| if (client == null) { |
| Log.e(TAG, "unregisterEnrollmentCallback(): listener was not previously " |
| + "registered"); |
| return; |
| } |
| listener.asBinder().unlinkToDeath(client, 0); |
| mEnrollmentStateClients.remove(client); |
| } |
| |
| /** |
| * Registers a {@link ICarTrustAgentBleCallback} to be notified for changes to the BLE state |
| * changes. |
| * |
| * @param listener {@link ICarTrustAgentBleCallback} |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public synchronized void registerBleCallback(ICarTrustAgentBleCallback listener) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| if (listener == null) { |
| throw new IllegalArgumentException("Listener is null"); |
| } |
| // If a new client is registering, create a new EnrollmentStateClient and add it to the list |
| // of listening clients. |
| BleStateChangeClient client = findBleStateClientLocked(listener); |
| if (client == null) { |
| client = new BleStateChangeClient(listener); |
| try { |
| listener.asBinder().linkToDeath(client, 0); |
| } catch (RemoteException e) { |
| Log.e(TAG, "Cannot link death recipient to binder " + e); |
| return; |
| } |
| mBleStateChangeClients.add(client); |
| } |
| } |
| |
| /** |
| * Iterates through the list of registered BLE State Change clients - |
| * {@link BleStateChangeClient} and finds if the given client is already registered. |
| * |
| * @param listener Listener to look for. |
| * @return the {@link BleStateChangeClient} if found, null if not |
| */ |
| @Nullable |
| private BleStateChangeClient findBleStateClientLocked( |
| ICarTrustAgentBleCallback listener) { |
| IBinder binder = listener.asBinder(); |
| // Find the listener by comparing the binder object they host. |
| for (BleStateChangeClient client : mBleStateChangeClients) { |
| if (client.isHoldingBinder(binder)) { |
| return client; |
| } |
| } |
| return null; |
| } |
| |
| /** |
| * Unregister the given BLE State Change listener |
| * |
| * @param listener client to unregister |
| */ |
| @Override |
| @RequiresPermission(PERMISSION_CAR_ENROLL_TRUST) |
| public synchronized void unregisterBleCallback(ICarTrustAgentBleCallback listener) { |
| ICarImpl.assertTrustAgentEnrollmentPermission(mContext); |
| if (listener == null) { |
| throw new IllegalArgumentException("Listener is null"); |
| } |
| |
| BleStateChangeClient client = findBleStateClientLocked(listener); |
| if (client == null) { |
| Log.e(TAG, "unregisterBleCallback(): listener was not previously " |
| + "registered"); |
| return; |
| } |
| listener.asBinder().unlinkToDeath(client, 0); |
| mBleStateChangeClients.remove(client); |
| } |
| |
| /** |
| * The interface that an enrollment delegate has to implement to add/remove escrow tokens. |
| */ |
| interface CarTrustAgentEnrollmentRequestDelegate { |
| /** |
| * Add the given escrow token that was generated by the peer device that is being enrolled. |
| * |
| * @param token the 64 bit token |
| * @param uid user id |
| */ |
| void addEscrowToken(byte[] token, int uid); |
| |
| /** |
| * Remove the given escrow token. This should be called when removing a trusted device. |
| * |
| * @param handle the 64 bit token |
| * @param uid user id |
| */ |
| void removeEscrowToken(long handle, int uid); |
| |
| /** |
| * Query if the token is active. The result is asynchronously delivered through a callback |
| * {@link CarTrustAgentEnrollmentService#onEscrowTokenActiveStateChanged(long, boolean, |
| * int)} |
| * |
| * @param handle the 64 bit token |
| * @param uid user id |
| */ |
| void isEscrowTokenActive(long handle, int uid); |
| } |
| |
| void setEnrollmentRequestDelegate(CarTrustAgentEnrollmentRequestDelegate delegate) { |
| mEnrollmentDelegate = delegate; |
| } |
| |
| void dump(PrintWriter writer) { |
| writer.println("*CarTrustAgentEnrollmentService*"); |
| writer.println("Enrollment Service Logs:"); |
| for (String log : mLogQueue) { |
| writer.println("\t" + log); |
| } |
| } |
| |
| private void addEnrollmentServiceLog(String message) { |
| if (mLogQueue.size() >= MAX_LOG_SIZE) { |
| mLogQueue.remove(); |
| } |
| mLogQueue.add(System.currentTimeMillis() + " : " + message); |
| } |
| |
| private void dispatchEscrowTokenActiveStateChanged(long handle, boolean active) { |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| try { |
| client.mListener.onEscrowTokenActiveStateChanged(handle, active); |
| } catch (RemoteException e) { |
| Log.e(TAG, "Cannot notify client of a Token Activation change: " + active); |
| } |
| } |
| } |
| |
| private void dispatchEnrollmentFailure(int error) { |
| for (EnrollmentStateClient client : mEnrollmentStateClients) { |
| try { |
| client.mListener.onEnrollmentHandshakeFailure(null, error); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onEnrollmentHandshakeFailure dispatch failed", e); |
| } |
| } |
| } |
| |
| /** |
| * Currently, we store a map of uid -> a set of deviceId+deviceInfo strings |
| * This method extracts deviceInfo from a device+deviceInfo string, which should be |
| * created by {@link #serializeDeviceInfoWithId(TrustedDeviceInfo, String)} |
| * |
| * @param deviceInfoWithId deviceId+deviceInfo string |
| */ |
| @Nullable |
| private static TrustedDeviceInfo extractDeviceInfo(String deviceInfoWithId) { |
| int delimiterIndex = deviceInfoWithId.indexOf(DEVICE_INFO_DELIMITER); |
| if (delimiterIndex < 0) { |
| return null; |
| } |
| return TrustedDeviceInfo.deserialize(deviceInfoWithId.substring(delimiterIndex + 1)); |
| } |
| |
| /** |
| * Extract deviceId from a deviceId+deviceInfo string which should be created by |
| * {@link #serializeDeviceInfoWithId(TrustedDeviceInfo, String)} |
| * |
| * @param deviceInfoWithId deviceId+deviceInfo string |
| */ |
| @Nullable |
| private static String extractDeviceId(String deviceInfoWithId) { |
| int delimiterIndex = deviceInfoWithId.indexOf(DEVICE_INFO_DELIMITER); |
| if (delimiterIndex < 0) { |
| return null; |
| } |
| return deviceInfoWithId.substring(0, delimiterIndex); |
| } |
| |
| // Create deviceId+deviceInfo string |
| private static String serializeDeviceInfoWithId(TrustedDeviceInfo info, String id) { |
| return new StringBuilder() |
| .append(id) |
| .append(DEVICE_INFO_DELIMITER) |
| .append(info.serialize()) |
| .toString(); |
| } |
| |
| /** |
| * Class that holds onto client related information - listener interface, process that hosts the |
| * binder object etc. |
| * <p> |
| * It also registers for death notifications of the host. |
| */ |
| private class EnrollmentStateClient implements DeathRecipient { |
| private final IBinder mListenerBinder; |
| private final ICarTrustAgentEnrollmentCallback mListener; |
| |
| EnrollmentStateClient(ICarTrustAgentEnrollmentCallback listener) { |
| mListener = listener; |
| mListenerBinder = listener.asBinder(); |
| } |
| |
| @Override |
| public void binderDied() { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Binder died " + mListenerBinder); |
| } |
| mListenerBinder.unlinkToDeath(this, 0); |
| synchronized (CarTrustAgentEnrollmentService.this) { |
| mEnrollmentStateClients.remove(this); |
| } |
| } |
| |
| /** |
| * Returns if the given binder object matches to what this client info holds. |
| * Used to check if the listener asking to be registered is already registered. |
| * |
| * @return true if matches, false if not |
| */ |
| public boolean isHoldingBinder(IBinder binder) { |
| return mListenerBinder == binder; |
| } |
| } |
| |
| private class BleStateChangeClient implements DeathRecipient { |
| private final IBinder mListenerBinder; |
| private final ICarTrustAgentBleCallback mListener; |
| |
| BleStateChangeClient(ICarTrustAgentBleCallback listener) { |
| mListener = listener; |
| mListenerBinder = listener.asBinder(); |
| } |
| |
| @Override |
| public void binderDied() { |
| if (Log.isLoggable(TAG, Log.DEBUG)) { |
| Log.d(TAG, "Binder died " + mListenerBinder); |
| } |
| mListenerBinder.unlinkToDeath(this, 0); |
| synchronized (CarTrustAgentEnrollmentService.this) { |
| mBleStateChangeClients.remove(this); |
| } |
| } |
| |
| /** |
| * Returns if the given binder object matches to what this client info holds. |
| * Used to check if the listener asking to be registered is already registered. |
| * |
| * @return true if matches, false if not |
| */ |
| public boolean isHoldingBinder(IBinder binder) { |
| return mListenerBinder == binder; |
| } |
| |
| public void onEnrollmentAdvertisementStarted() { |
| try { |
| mListener.onEnrollmentAdvertisingStarted(); |
| } catch (RemoteException e) { |
| Log.e(TAG, "onEnrollmentAdvertisementStarted() failed", e); |
| } |
| } |
| } |
| |
| /** |
| * Returns the name that should be used for the device during enrollment of a trusted device. |
| * |
| * <p>The returned name will be a combination of a prefix sysprop and randomized digits. |
| */ |
| private String getEnrollmentDeviceName() { |
| if (mEnrollmentDeviceName == null) { |
| String deviceNamePrefix = CarProperties.trusted_device_device_name_prefix().orElse(""); |
| deviceNamePrefix = deviceNamePrefix.substring( |
| 0, Math.min(deviceNamePrefix.length(), DEVICE_NAME_PREFIX_LIMIT)); |
| |
| int randomNameLength = DEVICE_NAME_LENGTH_LIMIT - deviceNamePrefix.length(); |
| String randomName = Utils.generateRandomNumberString(randomNameLength); |
| mEnrollmentDeviceName = deviceNamePrefix + randomName; |
| } |
| return mEnrollmentDeviceName; |
| } |
| } |