Description
HP OXPd is intended to be a fleet-wide SDK (software development kit) that provides developers access to a consistent set of device servicesDevice Service APIs
In the current release (HP OXPd 1.6) device web service APIs, or exposed methods, include UI configuration services, scan services, USB accessory services, and security services. Web applications that utilize the HP OXPd APIs will operate consistently across a wide variety of HP devices. This saves time and energy associated with the development, qualification, deployment, and updates of workflow application software. Depending on the perspective the HP OXPd enabled device can be viewed as client or server technology. From a developer's perspective, the HP OXPd enabled device is a server component which provides access to the exposed methods via the SOAP protocol. In HP OXPd, this is referred to as the physical viewpoint and shows the remote web application as the client and the HP device as the server. However, from a users', or logical perspective, the device behaves consistently with standard client technology accessing a remote server web application via a standard web browser. Both perspectives are correct and are important theoretical concepts for understanding the HP OXPd development platform. (See Figure 1)Security
Channel encryption is used by HP OXPd to prevent the unauthorized access of user data. Specifically, Secure Sockets Layer (SSL) is employed whenever the HTTP protocol is used. This is also known as HTTPS. The HP OXPd enabled device will request and validate a server’s identity certificate before establishing a connection. If user authentication is enabled, the user is prompted for credentials at the device control panel. These credentials are then stored in an HTTP header and forwarded to an HP OXPd web application for validation. Since network credentials are being passed via the HTTP header, HP strongly recommends using SSL with HTTP, or HTTPS. This security measure will encrypt the users' credentials and effectively protects sensitive data travelling to and from devices from unauthorized access.References