Definitions - Medisana/vitadock-api GitHub Wiki
- VitaDock®: VitaDock® is Medisana's new product revolution and consists of a free application as well as the appropriate measuring modules for reading and managing your vital data together with your iPhone®, iPod touch®, or iPad®. For simplicity in this documentation it will simply be called "VitaDock".
- Medisana AG: VitaDock is produced and developed by Medisana GmbH, Carl-Schurz-Straße 2, 41460 Neuss, Germany, www.medisana.de. For simplicity in this documentation it will simply be called "Medisana".
- VitaDock Online: The server system hosting data, keys and user credentials as well as the web application for signup and signin. Note that there is also a Test environment server (see the Servers wiki page for more information).
- VitaDock (Application): The iPhone/Android application (by Medisana GmbH) that connects to a number of medical devices by Medisana GmbH and transmits/synchronizes the measurement data with VitaDock Online
- VitaDock Online Account: An account on the VitaDock Online to store data of the VitaDock Online Modules
- VitaDock Online User: An individual with a VitaDock Online Account on the VitaDock Online
- VitaDock Online User Credentials: Login information (email / password) of a VitaDock Online User
- Web Interface: The web site to login and to register and change a VitaDock Online Account (see Servers
- Login Process: The web flow leading a VitaDock Online User through the login and the permission request screens, using an Unauthorized Access Token (provided by the Consumer) as the session identifier.
- VitaDock Online Module: Refers to one of the following modules:
CardioDock: VitaDock Online module that corresponds to the data measured/generated by VitaDock with the CardioDock hardware module (e.g. blood pressure) by Medisana
GlucoDock: VitaDock Online module that corresponds to the data measured/generated by VitaDock with the GlucoDock hardware module (e.g. blood sugar) by Medisana. Note that this module is accessed through three sub-modules: GlucoDockGlucose (blood sugar), GlucoDockInsulin (insulin injections) and GlucoDockMeal (carbohydrate consummation)
TargetScale: VitaDock Online module that corresponds to the data measured/generated by VitaDock with the TargetScale hardware module (e.g. weight) by Medisana
ThermoDock: VitaDock Online module that corresponds to the data measured/generated by VitaDock with the ThermoDock hardware module (e.g. temperature) by Medisana
- OAuth: The authentication protocol used for managing connections with the VitaDock Online. Please note that VitaDock Online uses this OAuth configuration:
HMAC SHA-256 encoding (for additional security, instead of the standard SHA1 encoding)
Fixed callback URL (for additional security, no dynamic
oauth_callbackparameter)
Support for mobile devices (for additional security, separate device token and secret)
- Consumer: A 3rd party website or application that uses the OAuth protocol to access the VitaDock Online Server and the VitaDock Online Modules on behalf of the VitaDock Online User
- Application Token: A value used by a centralized Consumer (e.g. a web site) to identify itself to the VitaDock Online
- Application Secret: A value used by the centralized Consumer to proof ownership of the Application Token to the VitaDock Online
- Device Token: A value used by a decentralized Consumer (e.g. an single instance of a mobile phone or desktop application) to identify itself to the VitaDock Online
- Device Secret: A value used by the decentralized Consumer to proof ownership of the Device Token to the VitaDock Online
- Access Token: A value used by the Consumer and VitaDock Online to allow and manage access rights to data of the VitaDock Online Modules
- Access Rights: Rules defined by the VitaDock Online User to restrict access of an Access Token to the VitaDock Online Modules
- Access Secret: A value used by the Consumer to proof ownership of the Access Token to VitaDock Online
- Unauthorized Access Token: A value used by the Consumer and VitaDock Online to identify an initial request for an Access Token throughout the authentication process
- Unauthorized Access Secret: A value used by the Consumer to proof ownership of the Unauthorized Access Token
- Verifier Token: A value used by the VitaDock Online to ensure that the Consumer is who he claims to be
- Attacker: A malicious third party trying to gain unauthorized access to data or user credentials of one, some or all VitaDock Online Users, not knowing secret or user credentials in the first place
- Man-in-the-Middle-Attack: The action of a third party (through which the data between the Consumer and VitaDock Online is transferred) of listening and possibly deciphering confidential data flows