How to verify client application identity?

Question

Hello,
I would appreciate some guidance from senior security people in this forum. Here is what I am trying to do:
1- I am responsible for partial development of a TECHNICAL FRAMEWORK, which will end-up packaged as a signed jar file: i.e., "signedFramework.jar".
2- The purpose of the framework is, of course, to be used by different BUSINESS APPLICATIONS.
3- These business applications are typically packaged as war files, and embed the above "signedFramework.jar" with them, allowing them to make direct calls to some framework operations/classes (so, no networking involved).
3- Each business application has its own certificate that will be used to sign its own package.
==> Given the situation above, can anyone help (high-level description) with the following:
- Whenever framework sensitive operations get called, I would like to be able to verify the calling application identity: To do that, I was thinking of retrieving the certificate from the calling application. By comparing info from the retrieved certificate with a "trusted keystore" , I'd be able to authenticate the client application and allow or deny the operation.
Is this common practice? Any hint?
Thanks for your help and time,
MD

Answer 1

or... from DAA.
1. client sends U to server
2. server creates a nonce n and encrypts with the public key of the client
3. client decrypts n and computes hash(U||n) and sends to server
4. server computes hash(U||n) and compares it with the value received from the client
This may take place over a public network iff U can be made public.
     C                         S
     |---------U-------->|
     |                         |
     |<------{n}_PK------|
     |                         |
     |----hash(U||n)---->|
     |          ____________|________________
     |          | Server computes hash(U||n) |
     |       | and compares it to value   |
     |          | supplied by client         |
    |       |----------------------------|
     |                         |