Peer-to-peer identity management interfaces and methods

摘要

Peer-to-peer (P2P) application programming interfaces (APIs) that allow an application to create, import, export, manage, enumerate, and delete P2P identities are presented. Further, the management of group identity information is provided. APIs abstract away from low level credential and cryptographic functions required to create and manage P2P identities. This management includes retrieval and setting of a friendly name, generation of a cryptographic public/private key pair, retrieval of security information in the form of an XML fragment, and creation of a new name based on an existing identity.

主权项

1. A method comprising:
providing an application program interface for use by an application program of a resolution protocol to manage peer-to-peer identities, the application program of the resolution protocol and a server process being on a same node of a peer-to-peer network; receiving, at the server process on the same node, a peer identity create call having a plurality of call parameters comprising a classifier, a peer-to-peer friendly name, a handle to a container in which a key pair exists, and a pointer to a location to which an identity name should be returned; parsing, at the server process, the peer identity create call to retrieve the plurality of call parameters; returning to the application program a value indicative of a success or failure of the peer identity create call; the server process being configured to receive a peer identity delete call configured to delete one or more of certificates, private keys, or group information associated with a deleted identity; and the server process further being configured to receive a peer identity enumerate call configured to:
enumerate peer identities including a parameter comprising a pointer to a location where a handle to an enumeration object is returned; andenumerate groups associated with the peer identity including parameters comprising a name of an identity for which groups will be enumerated, and a pointer to the location where a handle to an enumeration object is returned.