From: Jihun Ha Date: Mon, 23 Jan 2017 09:33:01 +0000 (+0900) Subject: Add a logic to filter a OT/MOT case which should return a failure X-Git-Tag: 1.3.0~775 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=bc9e1f1bf4371680697dc008b1eb22044c543dd3;p=platform%2Fupstream%2Fiotivity.git Add a logic to filter a OT/MOT case which should return a failure It should return an ES_OWNERSHIP_IS_NOT_SYNCHRONIZED error under the below condition: - An ownership information is stored in a mediator PDM DB - The found enrollee is an owned state but owned by other mediator Additionally, add getOwnerID API to get a device owner id if an enrollee is owned Change-Id: Iafabaf5731babad152f2b155007c6299b79af53c Signed-off-by: Jihun Ha Reviewed-on: https://gerrit.iotivity.org/gerrit/16685 Tested-by: jenkins-iotivity Reviewed-by: Heewon Park Reviewed-by: Uze Choi --- diff --git a/service/easy-setup/inc/escommon.h b/service/easy-setup/inc/escommon.h index 82f992f..ec74a57 100755 --- a/service/easy-setup/inc/escommon.h +++ b/service/easy-setup/inc/escommon.h @@ -206,9 +206,12 @@ typedef enum ES_PRE_CONFIG_PIN_PROVISIONING_FAILURE, /** - * The found enrollee's owner ID indicates a same ID of mediator. - * However, a list of owned devices managed in mediator's PMD db has no element for the found enrollee. - * That can happen where only mediator is reset without any inform to the enrollee. + * Ownership information is not synchronized between Mediator and Enrollee. + * e.g. A mediator's PDM DB has an ownership information to the found enrollee + * but it is actually owned by other mediator. + * That can happen where the found enrollee is reset and performed in easy setup without any inform to the first mediator. + * e.g. A list of owned devices managed in mediator's PMD db has no element for the found enrollee. + * That can happen where only mediator is reset without any inform to the enrollee. * To proceed an ownership transfer to the enrollee, it needs to reset the enrollee's SVR DB for its owner, i.e. the mediator */ ES_OWNERSHIP_IS_NOT_SYNCHRONIZED, diff --git a/service/easy-setup/mediator/richsdk/inc/ESRichCommon.h b/service/easy-setup/mediator/richsdk/inc/ESRichCommon.h index 7783de2..5b28bd8 100755 --- a/service/easy-setup/mediator/richsdk/inc/ESRichCommon.h +++ b/service/easy-setup/mediator/richsdk/inc/ESRichCommon.h @@ -34,6 +34,7 @@ #ifdef __WITH_DTLS__ #include "securevirtualresourcetypes.h" #include "OCProvisioningManager.hpp" +#include "ocrandom.h" #endif #include "escommon.h" @@ -512,6 +513,7 @@ namespace OIC m_selectedOTMethod = OIC_JUST_WORKS; m_isMOTEnabled = false; m_isOwned = false; + m_ownerID = {}; #endif } #ifdef __WITH_DTLS__ @@ -531,6 +533,19 @@ namespace OIC { m_selectedOTMethod = OIC_OXM_COUNT; // Out-of-range } + + if(resource->getOwnedStatus()) + { + char uuidString[UUID_STRING_SIZE]; + if(OCConvertUuidToString(resource->getDevPtr()->doxm->owner.id, uuidString)) + { + m_ownerID = uuidString; + } + else + { + m_ownerID = {}; + } + } } } @@ -548,6 +563,11 @@ namespace OIC { return m_isOwned; } + + const std::string getOwnerID() + { + return m_ownerID; + } #endif const std::string getDeviceUUID() { @@ -573,6 +593,7 @@ namespace OIC OicSecOxm_t m_selectedOTMethod; bool m_isMOTEnabled; bool m_isOwned; + std::string m_ownerID; #endif }; diff --git a/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.cpp b/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.cpp index 2dba9dd..66fab52 100755 --- a/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.cpp +++ b/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.cpp @@ -33,6 +33,7 @@ #include "srmutility.h" #include "aclresource.h" #include "internal/doxmresource.h" +#include "ocrandom.h" namespace OIC { @@ -66,6 +67,31 @@ namespace OIC { (void) secDbPath; m_ocResource = resource; + + OCUUIdentity* mediatorDevId = (OCUUIdentity* )OICMalloc(sizeof(OCUUIdentity)); + + if(!mediatorDevId) + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "provisionOwnership: OICMalloc error return"); + m_mediatorID = {}; + } + + if(OC::OCPlatform::getDeviceId(mediatorDevId) != OC_STACK_OK) + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "getDeviceId is failed."); + OICFree(mediatorDevId); + m_mediatorID = {}; + } + + char uuidString[UUID_STRING_SIZE]; + if(OCConvertUuidToString(mediatorDevId->id, uuidString)) + { + m_mediatorID = uuidString; + } + else + { + m_mediatorID = {}; + } } void EnrolleeSecurity::onEnrolleeSecuritySafetyCB(OC::PMResultList_t *result, @@ -165,7 +191,95 @@ namespace OIC } } + bool EnrolleeSecurity::isOwnerIDMatched(std::shared_ptr< OC::OCSecureResource > foundDevice) + { + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "isOwnerIDMatched IN"); + + if(foundDevice.get() == nullptr) + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "foundDevice is NULL ptr"); + return false; + } + + bool ret = false; + std::string ownerID; + char uuidString[UUID_STRING_SIZE]; + if(OCConvertUuidToString(foundDevice->getDevPtr()->doxm->owner.id, uuidString)) + { + ownerID = uuidString; + } + else + { + ownerID = {}; + } + + if(ownerID == m_mediatorID) + { + OIC_LOG(INFO, ENROLEE_SECURITY_TAG, + "The found device's first owner ID is matched with Mediator's ID"); + ret = true; + } + else + { + OIC_LOG(INFO, ENROLEE_SECURITY_TAG, + "The found device's first owner ID is NOT matched with Mediator's ID"); + } + + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "isOwnerIDMatched OUT"); + + return ret; + } + #ifdef MULTIPLE_OWNER + bool EnrolleeSecurity::isSubOwnerIDMatched(std::shared_ptr< OC::OCSecureResource > foundDevice) + { + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "isSubOwnerIDMatched IN"); + + if(foundDevice.get() == nullptr) + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, + "The found device's sub owner ID is NOT matched with Mediator's ID"); + + return false; + } + + bool ret = false; + std::string subOwnerID; + char uuidString[UUID_STRING_SIZE]; + + OicSecSubOwner_t* subOwnerList = foundDevice->getDevPtr()->doxm->subOwners; + + while(subOwnerList) + { + if(OCConvertUuidToString(subOwnerList->uuid.id, uuidString)) + { + subOwnerID = uuidString; + } + else + { + subOwnerID = {}; + } + + if(subOwnerID == m_mediatorID) + { + OIC_LOG(INFO, ENROLEE_SECURITY_TAG, + "The found device's owner ID is matched with Mediator's ID as a second owner"); + ret = true; + break; + } + subOwnerList = subOwnerList->next; + } + + if(!ret) + { + OIC_LOG(INFO, ENROLEE_SECURITY_TAG, + "The found device's sub owner ID is NOT matched with Mediator's ID"); + } + + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "isSubOwnerIDMatched OUT"); + return ret; + } + void EnrolleeSecurity::SelectMOTMethodCB(PMResultList_t *result, int hasError) { OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "SelectMOTMethodCB IN"); @@ -375,6 +489,18 @@ namespace OIC OIC_LOG_V(DEBUG, ENROLEE_SECURITY_TAG, "HOST: %s", m_securedResource->getDevAddr().c_str()); OIC_LOG_V(DEBUG, ENROLEE_SECURITY_TAG, "SID: %s", m_securedResource->getDeviceID().c_str()); OIC_LOG_V(DEBUG, ENROLEE_SECURITY_TAG, "Owned status: %d", m_securedResource->getOwnedStatus()); + if(m_securedResource->getOwnedStatus()) + { + char uuidString[UUID_STRING_SIZE]; + if(OCConvertUuidToString(m_securedResource->getDevPtr()->doxm->owner.id, uuidString)) + { + OIC_LOG_V(DEBUG, ENROLEE_SECURITY_TAG, "Owner ID: %s", uuidString); + } + else + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "OCConvertUuidToString is failed"); + } + } if(callback != NULL) { @@ -384,11 +510,11 @@ namespace OIC ESResult::ES_SECURE_RESOURCE_IS_DISCOVERED); ownershipTransferData = callback(securityProvisioningStatus); +#ifdef MULTIPLE_OWNER if(OIC_RANDOM_DEVICE_PIN == ownershipTransferData.getMOTMethod()) { OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "Selected MOT Method: OIC_RANDOM_DEVICE_PIN"); } -#ifdef MULTIPLE_OWNER else if(OIC_PRECONFIG_PIN == ownershipTransferData.getMOTMethod()) { OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "Selected MOT Method: OIC_PRECONFIG_PIN"); @@ -398,14 +524,60 @@ namespace OIC #endif } - if(m_securedResource->getOwnedStatus() && isOwnedDeviceRegisteredInSVRDB()) // owned check logic + if(m_securedResource->getOwnedStatus()) { - OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, +#ifdef MULTIPLE_OWNER + if(isOwnedDeviceRegisteredInSVRDB() && + (isOwnerIDMatched(m_securedResource) || + isSubOwnerIDMatched(m_securedResource))) +#else + if(isOwnedDeviceRegisteredInSVRDB() && + isOwnerIDMatched(m_securedResource)) +#endif + { + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "The found device is already owned by Mediator.(SUCCESS)"); - res = ESResult::ES_OK; - return res; + res = ESResult::ES_OK; + return res; + } +#ifdef MULTIPLE_OWNER + else if(!isOwnedDeviceRegisteredInSVRDB() && + !isOwnerIDMatched(m_securedResource) && + !isSubOwnerIDMatched(m_securedResource) && + m_securedResource->isMOTSupported() && m_securedResource->isMOTEnabled() + && (ownershipTransferData.getMOTMethod() == OIC_RANDOM_DEVICE_PIN || + ownershipTransferData.getMOTMethod() == OIC_PRECONFIG_PIN)) + { + // MOT case; + res = performMultipleOwnershipTransfer(ownershipTransferData); + + if(res != ESResult::ES_OK) + { + OIC_LOG_V(ERROR, ENROLEE_SECURITY_TAG, "Multiple Ownership-Transfer failed. (%d)", res); + res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; + return res; + } + + std::unique_lock lck(m_mtx); + m_cond.wait(lck); + + if(!OTMResult) + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "Multiple Ownership-Transfer failed."); + res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; + return res; + } + } +#endif + else + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, + "The found device is already owned by Other Mediator.(FAILED)"); + res = ESResult::ES_OWNERSHIP_IS_NOT_SYNCHRONIZED; + return res; + } } - else // unowned check logic + else { if(isOwnedDeviceRegisteredInSVRDB()) { @@ -441,170 +613,90 @@ namespace OIC OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "Removing device is succeeded."); } - if(!m_securedResource->getOwnedStatus()) - { - ESResult result = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; - res = performOwnershipTransfer(result); + ESResult result = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; + res = performOwnershipTransfer(result); - if(res != ESResult::ES_OK) - { - OIC_LOG_V(ERROR, ENROLEE_SECURITY_TAG, "Ownership-Transfer failed. (%d)", res); - res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; - return res; - } - - std::unique_lock lck(m_mtx); - m_cond.wait(lck); - - if(!OTMResult) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "Ownership-Transfer failed."); - return result; - } -#ifdef MULTIPLE_OWNER - if( m_securedResource->isMOTSupported() && - m_securedResource->isMOTEnabled() && - OIC_PRECONFIG_PIN == ownershipTransferData.getMOTMethod() && - !ownershipTransferData.getPreConfiguredPin().empty()) - { - OC::ResultCallBack preconfigPinProvCB = std::bind( - &EnrolleeSecurity::onEnrolleeSecuritySafetyCB, - std::placeholders::_1, std::placeholders::_2, - static_cast(std::bind(&EnrolleeSecurity::PreconfigPinProvCB, - this, std::placeholders::_1, std::placeholders::_2)), - shared_from_this()); - - std::string pin = ownershipTransferData.getPreConfiguredPin(); - - OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "provisionPreconfPin is called."); - if(OC_STACK_OK != m_securedResource->provisionPreconfPin( - pin.c_str(), pin.length(), preconfigPinProvCB)) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "provisionPreconfPin API error"); - res = ESResult:: ES_PRE_CONFIG_PIN_PROVISIONING_FAILURE; - return res; - } - - m_cond.wait(lck); - - if(!PreConfigPinProvResult) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "provisionPreconfPin is failed."); - res = ESResult:: ES_PRE_CONFIG_PIN_PROVISIONING_FAILURE; - return res; - } - } - - if( m_securedResource->isMOTSupported() && - m_securedResource->isMOTEnabled() && - (OIC_PRECONFIG_PIN == ownershipTransferData.getMOTMethod() || - OIC_RANDOM_DEVICE_PIN == ownershipTransferData.getMOTMethod())) - { - OC::ResultCallBack selectMOTMethodCB = std::bind( - &EnrolleeSecurity::onEnrolleeSecuritySafetyCB, - std::placeholders::_1, std::placeholders::_2, - static_cast(std::bind(&EnrolleeSecurity::SelectMOTMethodCB, - this, std::placeholders::_1, std::placeholders::_2)), - shared_from_this()); - - OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "selectMOTMethod is called."); - if(OC_STACK_OK != m_securedResource->selectMOTMethod( - ownershipTransferData.getMOTMethod(), - selectMOTMethodCB)) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "selectMOTMethod API error"); - res = ESResult:: ES_MOT_METHOD_SELECTION_FAILURE; - return res; - } + if(res != ESResult::ES_OK) + { + OIC_LOG_V(ERROR, ENROLEE_SECURITY_TAG, "Ownership-Transfer failed. (%d)", res); + res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; + return res; + } - m_cond.wait(lck); + std::unique_lock lck(m_mtx); + m_cond.wait(lck); - if(!MOTMethodProvResult) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "selectMOTMethod is failed."); - res = ESResult:: ES_MOT_METHOD_SELECTION_FAILURE; - return res; - } - } -#endif + if(!OTMResult) + { + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "Ownership-Transfer failed."); + return result; } #ifdef MULTIPLE_OWNER - else if(m_securedResource->isMOTSupported() && m_securedResource->isMOTEnabled() - && (ownershipTransferData.getMOTMethod() == OIC_RANDOM_DEVICE_PIN || - ownershipTransferData.getMOTMethod() == OIC_PRECONFIG_PIN)) + if( m_securedResource->isMOTSupported() && + m_securedResource->isMOTEnabled() && + OIC_PRECONFIG_PIN == ownershipTransferData.getMOTMethod() && + !ownershipTransferData.getPreConfiguredPin().empty()) { - OCUUIdentity* mediatorDevId = (OCUUIdentity* )OICMalloc(sizeof(OCUUIdentity)); - - if(!mediatorDevId) - { - OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "provisionOwnership: OICMalloc error return"); - res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; - return res; - } + OC::ResultCallBack preconfigPinProvCB = std::bind( + &EnrolleeSecurity::onEnrolleeSecuritySafetyCB, + std::placeholders::_1, std::placeholders::_2, + static_cast(std::bind(&EnrolleeSecurity::PreconfigPinProvCB, + this, std::placeholders::_1, std::placeholders::_2)), + shared_from_this()); - if(OC::OCPlatform::getDeviceId(mediatorDevId) != OC_STACK_OK) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "getDeviceId is failed."); - res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; - OICFree(mediatorDevId); - return res; - } + std::string pin = ownershipTransferData.getPreConfiguredPin(); - if(!memcmp(m_securedResource->getDevPtr()->doxm->owner.id, - mediatorDevId->id, UUID_IDENTITY_SIZE * sizeof(uint8_t))) + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "provisionPreconfPin is called."); + if(OC_STACK_OK != m_securedResource->provisionPreconfPin( + pin.c_str(), pin.length(), preconfigPinProvCB)) { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, - "The found device's owner ID is same as Mediator's ID but Meditor does not know it"); - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "Only Mediator would be reset"); - res = ESResult::ES_OWNERSHIP_IS_NOT_SYNCHRONIZED; - OICFree(mediatorDevId); + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "provisionPreconfPin API error"); + res = ESResult:: ES_PRE_CONFIG_PIN_PROVISIONING_FAILURE; return res; } - OicSecSubOwner_t* subOwnerList = m_securedResource->getDevPtr()->doxm->subOwners; + m_cond.wait(lck); - while(subOwnerList) + if(!PreConfigPinProvResult) { - if(!memcmp(subOwnerList->uuid.id, mediatorDevId->id, - UUID_IDENTITY_SIZE * sizeof(uint8_t))) - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, - "The found device's subOwner ID is same as Mediator's ID but Meditor does not know it"); - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "Only Mediator would be reset"); - res = ESResult::ES_OWNERSHIP_IS_NOT_SYNCHRONIZED; - OICFree(mediatorDevId); - return res; - } - subOwnerList = subOwnerList->next; + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "provisionPreconfPin is failed."); + res = ESResult:: ES_PRE_CONFIG_PIN_PROVISIONING_FAILURE; + return res; } + } - OICFree(mediatorDevId); - - res = performMultipleOwnershipTransfer(ownershipTransferData); + if( m_securedResource->isMOTSupported() && + m_securedResource->isMOTEnabled() && + (OIC_PRECONFIG_PIN == ownershipTransferData.getMOTMethod() || + OIC_RANDOM_DEVICE_PIN == ownershipTransferData.getMOTMethod())) + { + OC::ResultCallBack selectMOTMethodCB = std::bind( + &EnrolleeSecurity::onEnrolleeSecuritySafetyCB, + std::placeholders::_1, std::placeholders::_2, + static_cast(std::bind(&EnrolleeSecurity::SelectMOTMethodCB, + this, std::placeholders::_1, std::placeholders::_2)), + shared_from_this()); - if(res != ESResult::ES_OK) + OIC_LOG(DEBUG, ENROLEE_SECURITY_TAG, "selectMOTMethod is called."); + if(OC_STACK_OK != m_securedResource->selectMOTMethod( + ownershipTransferData.getMOTMethod(), + selectMOTMethodCB)) { - OIC_LOG_V(ERROR, ENROLEE_SECURITY_TAG, "Multiple Ownership-Transfer failed. (%d)", res); - res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "selectMOTMethod API error"); + res = ESResult:: ES_MOT_METHOD_SELECTION_FAILURE; return res; } - std::unique_lock lck(m_mtx); m_cond.wait(lck); - if(!OTMResult) + if(!MOTMethodProvResult) { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "Multiple Ownership-Transfer failed."); - res = ESResult::ES_OWNERSHIP_TRANSFER_FAILURE; + OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "selectMOTMethod is failed."); + res = ESResult:: ES_MOT_METHOD_SELECTION_FAILURE; return res; } } #endif - else - { - OIC_LOG(ERROR, ENROLEE_SECURITY_TAG, "The found device is already owned by other PT"); - res = ESResult::ES_ERROR; - } } } else diff --git a/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.h b/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.h index 6ce1abe..8ecdb92 100755 --- a/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.h +++ b/service/easy-setup/mediator/richsdk/src/EnrolleeSecurity.h @@ -71,6 +71,7 @@ namespace OIC std::atomic removeDeviceResult; std::atomic aclResult; std::atomic certResult; + std::string m_mediatorID; std::shared_ptr< OC::OCSecureResource > m_securedResource; @@ -87,11 +88,13 @@ namespace OIC void SelectMOTMethodCB(PMResultList_t *result, int hasError); void PreconfigPinProvCB(PMResultList_t *result, int hasError); void MultipleOwnershipTransferCb(OC::PMResultList_t *result, int hasError); + bool isSubOwnerIDMatched(std::shared_ptr< OC::OCSecureResource > foundDevice); #endif void ownershipTransferCb(OC::PMResultList_t *result, int hasError, ESResult& res); void convertUUIDToString(const uint8_t uuid[UUID_SIZE], std::string& uuidString); std::string getResourceDeviceAddress(const std::string& host); + bool isOwnerIDMatched(std::shared_ptr< OC::OCSecureResource > foundDevice); #if defined(__WITH_DTLS__) && defined(__WITH_TLS__) public: diff --git a/service/easy-setup/sampleapp/mediator/linux/richsdk_sample/mediator.cpp b/service/easy-setup/sampleapp/mediator/linux/richsdk_sample/mediator.cpp index 0566527..1836233 100755 --- a/service/easy-setup/sampleapp/mediator/linux/richsdk_sample/mediator.cpp +++ b/service/easy-setup/sampleapp/mediator/linux/richsdk_sample/mediator.cpp @@ -102,6 +102,10 @@ ESOwnershipTransferData provisionSecurityStatusCallback(std::shared_ptrisOwnedDevice() << std::endl; + if(secProvisioningStatus->isOwnedDevice()) + { + cout << "Owner ID : " << secProvisioningStatus->getOwnerID() << std::endl; + } cout << "OT Method : " << secProvisioningStatus->getSelectedOTMethod() << std::endl; #ifdef MULTIPLE_OWNER cout << "MOT Enabled : " << secProvisioningStatus->isMOTEnabled() << std::endl;