be.fedict.eid.applet.service.spi

Interface IdentityIntegrityService

public interface IdentityIntegrityService

Interface for identity integrity service components. Can be used by the eID Applet Service to run integrity validation on the identity data that comes from the eID card.

Author:

Frank Cornelis

Method Summary

Modifier and Type	Method and Description
void	checkNationalRegistrationCertificate(List<X509Certificate> certificateChain) Checks the validity of the National Registration certificate.

Method Detail

checkNationalRegistrationCertificate

void checkNationalRegistrationCertificate(List<X509Certificate> certificateChain)
                                   throws SecurityException

Checks the validity of the National Registration certificate. After the eID Applet Service has performed the integrity checks on the incoming identity data files it will invoke this method on your component. Your implementation should check the validity of the given national registration certificate. This method should only be used to validation the national registration certificate. Processing the incoming identity data should be handled as part of the eID Applet target page.

Check out jTrust for an implementation of a PKI validation framework.

Parameters:

certificateChain - the national registration X509 certificate chain.

Throws:

SecurityException - in case the certificate is invalid/not accepted.