Cross Platform Nearby Networking

Transcription

1 Core OS #WWDC14 Cross Platform Nearby Networking Session 709 Demijan Klinc Software Engineer 2014 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.

2

3

4

5

6

7 itranslate Voice

8

9

10

11 Metronome Touch

12 Firechat

13

14

15

16

17

18 Agenda Basics Multipeer Connectivity on OS X Best Practices Custom Discovery Authentication

19 Basics

20 Wireless Technologies ios

21 Wireless Technologies OSX

22

23 Devices with Lightning connector Starts with 2012 Macs

24 Devices with Lightning connector Starts with 2012 Macs

25 Terminology Nearby Within range of supported wireless technologies Peer Nearby device Advertiser Device discoverable by other nearby devices Browser Device searching for other nearby devices

26 Discovery Session MCBrowserViewController MCAdvertiserAssistant MCNearbyServiceBrowser MCNearbyServiceAdvertiser MCPeerID MCSession

27 Discovery Session MCBrowserViewController MCAdvertiserAssistant MCNearbyServiceBrowser MCNearbyServiceAdvertiser MCPeerID MCSession

28 Discovery UI-based MCPeerID MCBrowserViewController MCAdvertiserAssistant!

29 PeerID PeerID Session Session Browser View Controller Advertiser Assistant Browser Advertiser

30 PeerID PeerID Session Session Browser View Controller Advertiser Assistant Browser Advertiser

31 PeerID PeerID Session Session Browser View Controller Advertiser Assistant Browser Advertiser

32 PeerID PeerID Session Session Browser View Controller Advertiser Assistant Browser Advertiser

33 peer:didchangestate: peer:didchangestate: PeerID PeerID Session Session Browser View Controller Advertiser Assistant Browser Advertiser

34 Discovery UI-based MCPeerID MCBrowserViewController MCAdvertiserAssistant Programmatic! MCPeerID MCNearbyServiceBrowser MCNearbyServiceAdvertiser

35 PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

36 PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

37 PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

38 startbrowsingforpeers startadvertisingpeer PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

39 foundpeer: PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

40 invitepeer: PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

41 invitepeer: PeerID PeerID Session Invite Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

42 didreceiveinvitationfrompeer: PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

43 didreceiveinvitationfrompeer: PeerID PeerID Session Accept message Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

44 peer:didchangestate: peer:didchangestate: PeerID PeerID Session Session Nearby Service Browser Nearby Service Advertiser Browser Advertiser

45 Discovery Session MCBrowserViewController MCAdvertiserAssistant MCNearbyServiceBrowser MCNearbyServiceAdvertiser MCPeerID MCSession

46 Discovery Session MCBrowserViewController MCAdvertiserAssistant MCNearbyServiceBrowser MCNearbyServiceAdvertiser MCPeerID MCSession

47 Session Data Session Session

48 Session Data Session Session

49 Session MCPeerID, MCSession Messages Streaming Resources

50 Messages Send [session senddata:data topeers:peerids withmode:mode error:&error]; Receive - (void) session:(mcsession *)session didreceivedata:(nsdata *)data frompeer:(mcpeerid *)peerid;

51 Messages Send [session senddata:data topeers:peerids withmode:mode error:&error]; Receive - (void) session:(mcsession *)session didreceivedata:(nsdata *)data frompeer:(mcpeerid *)peerid;

52 Streaming Start a stream NSOutputStream *outputstream = [session startstreamwithname:name topeer:peerid error:&error]; Receive a stream - (void) session:(mcsession *)session didreceivestream:(nsinputstream *)inputstream withname:(nsstring *)name frompeer:(mcpeerid *)peerid;

53 Streaming Start a stream NSOutputStream *outputstream = [session startstreamwithname:name topeer:peerid error:&error]; Receive a stream - (void) session:(mcsession *)session didreceivestream:(nsinputstream *)inputstream withname:(nsstring *)name frompeer:(mcpeerid *)peerid;

54 Resources Send NSProgress *progress = [session sendresourceaturl:url withname:name topeer:peerid completionhandler:completionhandler];

55 Resources Start receiving resource - (void) session:(mcsession *)session didstartreceivingresourcewithname:(nsstring *)name frompeer:(mcpeerid *)peerid withprogress:(nsprogress *)progress; Finish receiving resource - (void) session:(mcsession *)session didfinishreceivingresourcewithname:(nsstring *)name frompeer:(mcpeerid *)peerid aturl:(nsurl *)localurl witherror:(nserror *)error;

56 Resources Start receiving resource - (void) session:(mcsession *)session didstartreceivingresourcewithname:(nsstring *)name frompeer:(mcpeerid *)peerid withprogress:(nsprogress *)progress; Finish receiving resource - (void) session:(mcsession *)session didfinishreceivingresourcewithname:(nsstring *)name frompeer:(mcpeerid *)peerid aturl:(nsurl *)localurl witherror:(nserror *)error;

57 Summary Discovery phase and session phase UI-based and Programmatic discovery Send data API Messages, streaming, and resources More in-depth info in last year s talk

58 Multipeer Connectivity on OS X

59 Demijan

60 Demijan

61

62 Gabe

63 Gabe

64 Gabe

65 Gabe

66 Invite Gabe

67 Invite Gabe

68 Gabe

69 Gabe

70 Gabe

71 Accept Gabe

72 Demijan Gabe

73 Demijan Gabe

74 Demijan Gabe

75 Data Demijan Gabe

76 MCAdvertiserAssistant OS X // initialize MCAdvertiserAssistant *assistant = [[MCAdvertiserAssistant alloc] initwithservicetype:type discoveryinfo:nil session:session];

77 MCAdvertiserAssistant OS X // initialize MCAdvertiserAssistant *assistant = [[MCAdvertiserAssistant alloc] initwithservicetype:type discoveryinfo:nil session:session];! // start advertising [assistant start];

78 MCBrowserViewController OS X Subclasses NSViewController // initialize, set delegate MCBrowserViewController *browservc = [[MCBrowserViewController] alloc] initwithservicetype:servicetype session:session]; browservc.delegate = self;

79 MCBrowserViewController OS X Subclasses NSViewController // initialize, set delegate MCBrowserViewController *browservc = [[MCBrowserViewController] alloc] initwithservicetype:servicetype session:session]; browservc.delegate = self;! Present modally as a sheet // present [self presentviewcontrollerassheet:browservc];

80 MCBrowserViewController OS X // NSWindow based App self.bvcwindow = [NSWindow windowwithcontentviewcontroller:self.browserviewcontroller]; [NSApp beginsheet:self.bvcwindow modalforwindow:[nsapp mainwindow] modaldelegate:nil didendselector:null contextinfo:null];

81 MCBrowserViewController OS X // NSWindow based App self.bvcwindow = [NSWindow windowwithcontentviewcontroller:self.browserviewcontroller]; [NSApp beginsheet:self.bvcwindow modalforwindow:[nsapp mainwindow] modaldelegate:nil didendselector:null contextinfo:null];

82 MCBrowserViewControllerDelegate OS X // done button tapped - (void)browserviewcontrollerdidfinish: (MCBrowserViewController *)browservc { [self dismissviewcontroller:browservc]; }! // cancel button tapped - (void)browserviewcontrollerwascancelled: (MCBrowserViewController *)browservc { [self dismissviewcontroller:browservc]; }

83 Entitlements

84 Entitlements

85 Entitlements

86 Data

87 Demo Eric Chien Software Engineer

88 Summary API same as ios OS X specific presentation of the MCBrowserViewController Networking entitlements

89 Best Practices

90 PeerID [Mac] PeerID Advertiser Browser

91 PeerID [Mac] PeerID Advertiser Browser PeerID [Mac]

92 PeerID Browser PeerID [Mac]

93 PeerID Browser PeerID [Mac]

94 PeerID [Mac] PeerID Advertiser Browser PeerID [Mac]

95 PeerID [Mac] PeerID Advertiser Browser PeerID [Mac] PeerID [Mac]

96 Reuse Peer Objects PeerID [Mac] PeerID Advertiser Browser PeerID [Mac]

97 Reuse Peer Objects Serialize, store in defaults NSUserDefaults *defaults = [NSUserDefaults standarduserdefaults]; NSData *peeriddata = [NSKeyedArchiver archiveddatawithrootobject:peerid]; [defaults setobject:peeriddata forkey:kpeeridkey]; [defaults synchronize];

98 Reuse Peer Objects Serialize, store in defaults NSUserDefaults *defaults = [NSUserDefaults standarduserdefaults]; NSData *peeriddata = [NSKeyedArchiver archiveddatawithrootobject:peerid]; [defaults setobject:peeriddata forkey:kpeeridkey]; [defaults synchronize];! Deserialize, retrieve from defaults NSUserDefaults *defaults = [NSUserDefaults standarduserdefaults]; NSData *peeriddata = [defaults dataforkey:kpeeridkey]; MCPeerID *peerid = [NSKeyedUnarchiver unarchiveobjectwithdata:peeriddata];

99 Auto-inviting PeerID [Mac] PeerID Browser Browser Advertiser Advertiser

100 Auto-inviting PeerID [Mac] PeerID Browser Browser Advertiser Advertiser PeerID PeerID foundpeer: foundpeer:

101 Auto-inviting Use a deterministic algorithm to determine who should invite - (void)browser:(mcnearbyservicebrowser *)browser foundpeer: (MCPeerID *)nearbypeerid withdiscoveryinfo:(nsdictionary *)info { // compare hash values if (mypeerid.hash > nearbypeerid.hash) { [self.browser invitepeer:nearbypeerid tosession:session withcontext:nil timeout:0]; } }

102 Discovery Info (Bonjour TXT Records) // MCAdvertiserAssistant MCAdvertiserAssistant *assistant = [[MCAdvertiserAssistant alloc] initwithservicetype:type discoveryinfo:info session:session]; // MCNearbyServiceAdvertiser MCNearbyServiceAdvertiser *advertiser = [[MCNearbyServiceAdvertiser alloc] initwithpeerid:mypeerid servicetype:type! discoveryinfo:info];

103 Discovery Info (Bonjour TXT Records) Keep discovery info small Both keys and values must be NSString TXT record entry key=value Maximum size for each TXT record entry 256 bytes More details

104 Custom Discovery

105 Discovery Phase UI-based MCPeerID MCBrowserViewController MCAdvertiserAssistant Programmatic! MCPeerID MCNearbyServiceBrowser MCNearbyServiceAdvertiser

106 Discovery UI-based MCPeerID MCBrowserViewController MCAdvertiserAssistant Programmatic! Custom! MCPeerID MCNearbyServiceBrowser MCNearbyServiceAdvertiser MCPeerID MCSession

107 Discover and Establish a Channel Data

108 Peer ID Step 1 Serialize and exchange PeerID PeerID Session Session

109 Peer ID Step 1 Serialize and exchange PeerID PeerID Session Serialized PeerID Session Serialized PeerID [NSKeyedArchiver archiveddatawithrootobject:]

110 Peer ID Step 1 Serialize and exchange PeerID PeerID Session Serialized PeerID Session Serialized PeerID [NSKeyedArchiver archiveddatawithrootobject:]

111 Peer ID Step 1 Serialize and exchange PeerID PeerID Session Session PeerID PeerID [NSKeyedUnarchiver unarchiveobjectwithdata:]

112 Peer ID Step 2 Create and exchange PeerID PeerID Session Session PeerID PeerID [MCSession nearbyconnectiondataforpeer:withcompletionhandler:]

113 Peer ID Step 2 Create and exchange PeerID PeerID Session Session PeerID PeerID Connection Data for iphone Connection Data for Mac [MCSession nearbyconnectiondataforpeer:withcompletionhandler:]

114 Peer ID Step 2 Create and exchange PeerID PeerID Session Session PeerID PeerID Connection Data for Mac Connection Data for iphone [MCSession nearbyconnectiondataforpeer:withcompletionhandler:]

115 Connect Peer PeerID PeerID Session Session PeerID PeerID Connection Data for Mac Connection Data for iphone [MCSession connectpeer:withconnectiondata:]

116 Connect Peer peer:didchangestate: peer:didchangestate: PeerID PeerID Session Session PeerID PeerID Connection Data for Mac Connection Data for iphone [MCSession connectpeer:withconnectiondata:]

117 Custom Discovery APIs Serialize NSData *peeriddata = [NSKeyedArchiver archiveddatawithrootobject:peerid]; Deserialize MCPeerID *peerid = [NSKeyedUnarchiver unarchiveobjectwithdata:peeriddata];

118 Custom Discovery APIs Serialize NSData *peeriddata = [NSKeyedArchiver archiveddatawithrootobject:peerid]; Deserialize MCPeerID *peerid = [NSKeyedUnarchiver unarchiveobjectwithdata:peeriddata];

119 Custom Discovery APIs Serialize NSData *peeriddata = [NSKeyedArchiver archiveddatawithrootobject:peerid]; Deserialize MCPeerID *peerid = [NSKeyedUnarchiver unarchiveobjectwithdata:peeriddata];

120 Custom Discovery APIs Get nearby connection data [session nearbyconnectiondataforpeer:peerid withcompletionhandler:^(nsdata *connectiondata, NSError *error) { // send connection data to nearby peer }];

121 Custom Discovery APIs Get nearby connection data [session nearbyconnectiondataforpeer:peerid withcompletionhandler:^(nsdata *connectiondata, NSError *error) { // send connection data to nearby peer }];

122 Custom Discovery APIs Connect to session [session connectpeer:peerid withnearbyconnectiondata:data timeout:timeout]; Cancel connect [session cancelconnectpeer:peerid];

123 Custom Discovery APIs Connect to session [session connectpeer:peerid withnearbyconnectiondata:data timeout:timeout]; Cancel connect [session cancelconnectpeer:peerid];

124 Custom Discovery APIs Connect to session [session connectpeer:peerid withnearbyconnectiondata:data timeout:timeout]; Cancel connect [session cancelconnectpeer:peerid];

125 Summary Fully customized discovery Two-step process Exchange peerids Exchange nearby connection data

126 Authentication

127

128

129 Encryption Authentication

130 Digital Identity (SecIdentityRef) Private Key (SecKeyRef) Certificate (SecCertificateRef)

131 Distributing Identities Web server attachment Mobile Device Management server More info Tech QA

132 Importing Digital Identity // Get password for importing an identity. const void *keys[] = {ksecimportexportpassphrase}; const void *values[] = {CFSTR( password )}; CFDictionaryRef optionsdictionary = CFDictionaryCreate(NULL, keys, values, 1, NULL, NULL); // Get identity data from PKCS#12 file. NSData *identitydata = [NSData datawithcontentsofurl:identitydataurl]; // Import digital identity. CFArray items = NULL; SecPKCS12Import(CFDataRef)identityData, optionsdictionary, &items);

133 Importing Digital Identity // Get password for importing an identity. const void *keys[] = {ksecimportexportpassphrase}; const void *values[] = {CFSTR( password )}; CFDictionaryRef optionsdictionary = CFDictionaryCreate(NULL, keys, values, 1, NULL, NULL); // Get identity data from PKCS#12 file. NSData *identitydata = [NSData datawithcontentsofurl:identitydataurl]; // Import digital identity. CFArray items = NULL; SecPKCS12Import(CFDataRef)identityData, optionsdictionary, &items);

134 Importing Digital Identity // Get password for importing an identity. const void *keys[] = {ksecimportexportpassphrase}; const void *values[] = {CFSTR( password )}; CFDictionaryRef optionsdictionary = CFDictionaryCreate(NULL, keys, values, 1, NULL, NULL); // Get identity data from PKCS#12 file. NSData *identitydata = [NSData datawithcontentsofurl:identitydataurl]; // Import digital identity. CFArray items = NULL; SecPKCS12Import(CFDataRef)identityData, optionsdictionary, &items);

135 Importing Digital Identity // Get password for importing an identity. const void *keys[] = {ksecimportexportpassphrase}; const void *values[] = {CFSTR( password )}; CFDictionaryRef optionsdictionary = CFDictionaryCreate(NULL, keys, values, 1, NULL, NULL); // Get identity data from PKCS#12 file. NSData *identitydata = [NSData datawithcontentsofurl:identitydataurl]; // Import digital identity. CFArray items = NULL; SecPKCS12Import(CFDataRef)identityData, optionsdictionary, &items);

136 Digital Identity (SecIdentityRef) Private Key (SecKeyRef) Certificate (SecCertificateRef)

137

138

139 Evaluating Chain of Trust

140 Evaluating Chain of Trust

141 Evaluating Chain of Trust

142 Evaluating Chain of Trust

143 Evaluating Chain of Trust

144 Evaluating Chain of Trust

145 Certificate Validation Create policy object Create trust object (using certificates and policy) Evaluate trust object

146 Certificate Validation NSArray *policy = [NSArray arraywithobject: ( bridge id)secpolicycreatebasicx509()]; SecTrustRef *trust; SecTrustCreateWithCertificates(( bridge CFArrayRef)certificate, ( bridge CFArrayRef)policy, &trust); SecTrustSetAnchorCertificates(trust, ( bridge CFArrayRef)[NSArray arraywithobject:( bridge id)anchor]); SecTrustResultType trustresult; SecTrustEvaluate(trust, &trustresult); allowconnection = (trustresult == ksectrustresultunspecified);

147 Certificate Validation NSArray *policy = [NSArray arraywithobject: ( bridge id)secpolicycreatebasicx509()]; SecTrustRef *trust; SecTrustCreateWithCertificates(( bridge CFArrayRef)certificate, ( bridge CFArrayRef)policy, &trust); SecTrustSetAnchorCertificates(trust, ( bridge CFArrayRef)[NSArray arraywithobject:( bridge id)anchor]); SecTrustResultType trustresult; SecTrustEvaluate(trust, &trustresult); allowconnection = (trustresult == ksectrustresultunspecified);

148 Certificate Validation NSArray *policy = [NSArray arraywithobject: ( bridge id)secpolicycreatebasicx509()]; SecTrustRef *trust; SecTrustCreateWithCertificates(( bridge CFArrayRef)certificate, ( bridge CFArrayRef)policy, &trust); SecTrustSetAnchorCertificates(trust, ( bridge CFArrayRef)[NSArray arraywithobject:( bridge id)anchor]); SecTrustResultType trustresult; SecTrustEvaluate(trust, &trustresult); allowconnection = (trustresult == ksectrustresultunspecified);

149 Certificate Validation NSArray *policy = [NSArray arraywithobject: ( bridge id)secpolicycreatebasicx509()]; SecTrustRef *trust; SecTrustCreateWithCertificates(( bridge CFArrayRef)certificate, ( bridge CFArrayRef)policy, &trust); SecTrustSetAnchorCertificates(trust, ( bridge CFArrayRef)[NSArray arraywithobject:( bridge id)anchor]); SecTrustResultType trustresult; SecTrustEvaluate(trust, &trustresult); allowconnection = (trustresult == ksectrustresultunspecified);

150 Certificate Validation NSArray *policy = [NSArray arraywithobject: ( bridge id)secpolicycreatebasicx509()]; SecTrustRef *trust; SecTrustCreateWithCertificates(( bridge CFArrayRef)certificate, ( bridge CFArrayRef)policy, &trust); SecTrustSetAnchorCertificates(trust, ( bridge CFArrayRef)[NSArray arraywithobject:( bridge id)anchor]); SecTrustResultType trustresult; SecTrustEvaluate(trust, &trustresult); allowconnection = (trustresult == ksectrustresultunspecified);

151 Authentication // instantiate with security MCSession *session = [[MCSession alloc] initwithpeer:mypeerid securityidentity:identity encryptionpreference:preference]; SecIdentityRef SecCertificateRef SecCertificateRef SecCertificateRef Identity Certificate Chain

152 Authentication - (void) session:(mcsession *)session didreceivecertificate:(nsarray *)certificate frompeer:(mcpeerid *)peerid certificatehandler:(void(^)(bool accept))certificatehandler SecCertificateRef SecCertificateRef SecCertificateRef SecCertificateRef Identity Certificate Chain

153 Summary Distribution and importing of digital identities Chain of trust evaluation

154 More Information Paul Danbold Core OS Technologies Evangelist Documentation Multipeer Connectivity Framework Reference MultipeerConnectivityFramework Sample Code MultipeerGroupChat Apple Developer Forums

155 Related Sessions What s New in Foundation Networking Nob Hill Tuesday 3:15PM StoryBoards and Controllers on OS X Pacific Heights Tuesday 4:30PM

156 Labs Networking Lab Core OS Lab B Wednesday 9:00AM Multipeer Connectivity Lab Core OS Lab A Wednesday 10:15AM View Controllers and Cocoa Lab Frameworks Lab B Thursday 11:30 AM Multipeer Connectivity Lab 2 Core OS Lab B Friday 9:00AM

157