User Identity Management (useridm)

Introduction

As a basic component of the Identity & Access Management (IAM) subsystem, User Identity Management (useridm) provides a unified interface for managing user credential information in the system and invokes authentication resources through the authentication executor management module to implement lifecycle management and secure storage of user credentials.

Figure 1 User identity credential management architecture

Directory Structure

//base/user_iam/user_idm
├── frameworks			# Framework code
├── interfaces			# Directory for storing external interfaces
│   └── innerkits		# Header files exposed to the internal subsystem
├── sa_profile			# Profile of the Service Ability
├── services			# Implementation of Service Ability services
├── unittest			# Directory for storing test code
├── utils			    # Directory for storing utility code
├── bundle.json			# Component description file
└── useridm.gni			# Build configuration

Usage

Available APIs

Table 1 APIs for managing user credentials

API	Description
addCredential(credentialInfo : CredentialInfo, callback : IIdmCallback) : void;	Adds a user credential.
updateCredential(credentialInfo:CredentialInfo, callback:IIdmCallback) : void;	Updates a user credential.
delUser(token : Uint8Array, callback : IIdmCallback) : void;	Deletes a user password. When a user password is deleted, all authentication credentials of the user are also deleted.
delCred(credentialId : Uint8Array, token : Uint8Array, callback : IIdmCallback) : void;	Deletes a user credential.

Table 2 API for querying user credential information

API	Description
getAuthInfo(callback : AsyncCallback<Array>,authType? : AuthType) : void;	Obtains one or all types of authentication credentials of a user.

Usage Guidelines

• The APIs defined in the header file common\interface\useridm_interface.h in the useriam_auth_executor_mgr repository must be implemented in a Trusted Execution Environment (TEE). In addition, the association between the user credentials and user IDs should not be tampered with, and unified user authentication must be supported.
• During the adaptation, vendors can refer to the software implementation of related functions provided by the OpenHarmony framework.

Repositories Involved

useriam_auth_executor_mgr

useriam_user_idm

useriam_user_auth

useriam_pin_auth

useriam_faceauth