Device Fingerprinting Definitions of Variables and Parameters

15-4 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager Figure 15–2 Option 2 1. The user is presented with the user name page with the embedded flash movie a. The flash movie makes an HTTP request triggering the flash fingerprint handling i. The server retrieves the HTTP request parameter v and stores it in session ii. The server retrieves HTTP request parameter client iii. The server retrieves HTTP request parameter fp iv. Parse fp with VCryptServletUtil.getFlashFingerprintclient, fp and store result in user session. v. The value of v received is returned to the flash movie in the HTTP response v= + cookieSet.getFlashCookie 2. The user submits the user name a. The application loads the user b. Run Pre-Authentication Rules c. Calls VCryptTracker.updateLog with the User, HTTP Cookie and Flash value 3. The user is taken to the password page with the embedded flash movie a. The flash movie makes an HTTP request triggering the flash fingerprint handling i. The server already has the value from the previous flash request ii. The new value generated by UpdateLog call is returned to flash movie 4. The user submits the password a. The application verifies the password b. Run the Post-Authentication Rules c. Calls VCryptTracker.updateAuthStatus with the authentication result

15.4.2 Option 2 Code Example

This section provides a code example for Option 2. Flash Fingerprinting 15-5 public String flashFingerPrintHttpServletRequest request { HttpSession session = request.getSessiontrue; try { CookieSet cookieSet = CookieSetsession.getAttributecookieSet; if cookieSet == null { String digitalCookie = request.getParameterv; String fpStr = request.getParameterfp; String client = request.getParameterclient; String flashFingerprint = VCryptServletUtil.getFlashFingerPrintclient, fpStr; session.setAttributev, digitalCookie; session.setAttributefp, flashFingerprint; } else { finger printing already happened, using previously generated cookie set } return cookieSet.getFlashCookie; } catch Exception e { Handle fingerprinting error } return ; } flashFingerPrint

15.5 Option 3