aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2023-12-02 02:05:15 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2023-12-02 02:05:15 +0000
commit4ef5736cf08b6d7ba503ed9064684e3640567c6d (patch)
tree1e17e637516ca48d1b982b84ea77d08bd36f1a25
parent7cded1c29bc72c86f3056b1e5b3460c550b5c312 (diff)
parent17bc8800a6823bfc2248ba6ebb0dcb99360e8007 (diff)
downloadfederated-compute-android14-qpr2-s3-release.tar.gz
Change-Id: I29e51c90c000c6ab8aea38a602b71f860f9207a7
-rw-r--r--fcp/protos/federatedcompute/common.proto23
1 files changed, 21 insertions, 2 deletions
diff --git a/fcp/protos/federatedcompute/common.proto b/fcp/protos/federatedcompute/common.proto
index 9b4bd5a..2c6f05c 100644
--- a/fcp/protos/federatedcompute/common.proto
+++ b/fcp/protos/federatedcompute/common.proto
@@ -117,7 +117,7 @@ enum ResourceCompressionFormat {
// Currently empty message which is sent when client (device) is rejected for
// participation and is not assigned a task.
-// Next id: 1003
+// Next id: 1004
message RejectionInfo {
RejectionReason.Enum reason = 1001;
@@ -126,10 +126,26 @@ message RejectionInfo {
oneof metadata {
// Retry after a period of time.
RetryWindow retry_window = 1002;
+
+ // The field is used when the RejectionReason is UNAUTHENTICATED.
+ AuthenticationMetadata auth_metadata = 1003;
}
}
-// Next id: 3
+// The metadata used to authenticate a device.
+// Next Id: 2
+message AuthenticationMetadata {
+ KeyAttestationAuthMetadata key_attestation_metadata = 1;
+}
+
+// The metadata to authenticate with key attestation.
+// Next Id: 2
+message KeyAttestationAuthMetadata {
+ // The challenge to generate hardware-backed key pairs on device.
+ bytes challenge = 1;
+}
+
+// Next id: 4
message RejectionReason {
enum Enum {
// Unknown status.
@@ -140,6 +156,9 @@ message RejectionReason {
// No permission to do the operation.
UNAUTHORIZED = 2;
+
+ // The device is not authenticated to the server.
+ UNAUTHENTICATED = 3;
}
}