From 28de00389b0f26261a242c650e194ee36c39ba98 Mon Sep 17 00:00:00 2001
From: Lu Chen <chelu@google.com>
Date: Tue, 15 Sep 2020 10:15:51 -0700
Subject: [PATCH] Add EMMG to carry fingerprinting and service blocking info

---
 common/security_profile_list.h | 91 ++++++++++++++++++++++++++++++++++
 1 file changed, 91 insertions(+)
 create mode 100644 common/security_profile_list.h

diff --git a/common/security_profile_list.h b/common/security_profile_list.h
new file mode 100644
index 0000000..9217e58
--- /dev/null
+++ b/common/security_profile_list.h
@@ -0,0 +1,91 @@
+// Copyright 2020 Google LLC. All rights reserved.
+//
+// Description:
+//   Container of device security profiles.  Security profiles indicate rules
+//   to allow using the profile. The rules are based on DRM capabilities of a
+//   device.
+
+#ifndef VIDEO_WIDEVINE_EXPORT_COMMON_SECURITY_PROFILE_LIST_H_
+#define VIDEO_WIDEVINE_EXPORT_COMMON_SECURITY_PROFILE_LIST_H_
+
+#include "third_party/absl/synchronization/mutex.h"
+#include "video/widevine/protos/public/client_identification.proto.h"
+#include "video/widevine/protos/public/device_security_profile_data.proto.h"
+#include "video/widevine/protos/public/provisioned_device_info.proto.h"
+#include "video/widevine/protos/public/security_profile.proto.h"
+
+namespace video_widevine {
+using ClientCapabilities = ClientIdentification::ClientCapabilities;
+
+// The SecurityProfileList will hold all security profiles.  During license
+// acquisition, information from the client and information from the server are
+// combined to deternmine the device's security profile level.
+
+class SecurityProfileList {
+ public:
+  explicit SecurityProfileList(const std::string& profile_namespace);
+  virtual ~SecurityProfileList() {}
+
+  // Initialize the security profile list. The size of the profile list is
+  // returned.
+  virtual int Init();
+
+  // Add the specified profile to the existing list of profiles.  Returns true
+  // if successfully inserted, false if unable to insert.
+  bool InsertProfile(const SecurityProfile& profile_to_insert);
+
+  // Populates |profiles_allow| with a list of profiles from the specified
+  // |profiles_to_check| list that meet the requirements for the this device.
+  // The number of profiles is returned.
+  virtual int GetQualifiedProfilesFromSpecifiedProfiles(
+      const std::vector<std::string>& profiles_to_check,
+      const ClientIdentification& client_id,
+      const ProvisionedDeviceInfo& device_info,
+      std::vector<std::string>* qualified_profiles) const;
+
+  // Populates |profiles_to_allow| with a list of profiles that meet the
+  // requirements for the this device. The number of profiles is returned.
+  virtual int GetQualifiedProfiles(
+      const ClientIdentification& client_id,
+      const ProvisionedDeviceInfo& device_info,
+      std::vector<std::string>* qualified_profiles) const;
+
+  // Return true if a profile exist matching the specified |name|.
+  // |security_profile| is owned by the caller and is populated if a profile
+  // exist.
+  bool GetProfileByName(const std::string& name,
+                        SecurityProfile* security_profile) const;
+  // Return the device security capabilities.  |drm_info| is populated with
+  // data from |client_id| and |device_info|.  |drm_info| must not be null and
+  // is owned by the caller.
+  bool GetDrmInfo(const ClientIdentification& client_id,
+                  const ProvisionedDeviceInfo& device_info,
+                  SecurityProfile::DrmInfo* drm_info) const;
+
+  // Return the number of profiles in the list.
+  int NumProfiles() const;
+
+  // Return a list of profile names.
+  virtual void GetProfileNames(std::vector<std::string>* profile_names) const;
+
+ protected:
+  void ClearAllProfiles();
+
+ private:
+  bool DoesProfileQualify(const SecurityProfile& profile,
+                          const ClientIdentification& client_id,
+                          const ProvisionedDeviceInfo& device_info) const;
+
+  int64 GetCurrentTimeSeconds() const;
+
+  bool IsProfileActive(const SecurityProfile& profile,
+                       int64 current_time_seconds) const;
+
+  mutable absl::Mutex mutex_;
+  // Security profiles
+  std::string profile_namespace_;
+  std::vector<SecurityProfile> security_profiles_ ABSL_GUARDED_BY(mutex_);
+};
+
+}  // namespace video_widevine
+#endif  // VIDEO_WIDEVINE_EXPORT_COMMON_SECURITY_PROFILE_LIST_H_