<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-Banner-1.webp" alt="M2P Fintech" title="" width="100%" height="253">Fixing a critical bug in your code can save the integrity of your project.&nbsp;&nbsp;What is equally important is continuously improving the quality of the code, testing, and automating it for new release. Developers must make sure they follow all these processes while seamlessly communicating the changes with their team members.&nbsp;&nbsp;That’s why development teams across the world practice a mechanism called Continuous Integration (CI) and Continuous Delivery (CD).&nbsp;Starting from generating a build using command line, uploading build to test flight using fast lane, interfacing Jenkins with bitbucket and Fastlane, CICD mechanism can simplify and automate the process of build generation for iOS developers.&nbsp;We are coming up with a 3-part series covering the A-Z of deploying CI/CD mechanism for automating build generation.&nbsp;&nbsp;In this blog, we will be talking about generating a local build using command line.&nbsp;Let’s dive in.&nbsp;This blog is written by <a class="link" href="https://www.linkedin.com/in/ranjith-ravichandran-73829793/">Ranjith Ravichandran</a>, Senior SDE, Product Engineering at M2P.&nbsp;<h2 class="heading-node" id="vixdomkir" style="text-align: justify">What is CI/CD?&nbsp;</h2>Continuous Integration is the practice of merging code changes to a shared repository many times a day. It includes automated building generation and testing. &nbsp;Continuous Delivery is continuous integration with additional processes which allows application release to the customers after each change or update. &nbsp;&nbsp;<h2 class="heading-node" id="gf7yuvxyf" style="text-align: justify">Why CI/CD?&nbsp;</h2>Continuous integration and continuous delivery (CI/CD) is a critical component of agile software development, which emphasizes the importance of delivering working software to users quickly and frequently. This allows stakeholders and users to access newly created features and provide feedback as soon as possible, so features can be iteratively improved.&nbsp;CI/CD is a valuable tool for software developers, regardless of the size of their team. For solo developers, CD may be even more important, as it can help to ensure that software is delivered to users quickly and reliably.&nbsp;In this blog, we will show you the behind the scenes of building, testing, archiving, and uploading an iOS application. Being aware of the native Apple developer tools and learning command line interaction is integral for anyone using CI/CD mechanism.&nbsp;Command line interactions can help you with the following.&nbsp;<ul class="list-node" id="pte7t3cwf"><li>Understanding apple technologies used for building and deploying an iOS application&nbsp;</li><li>Automating iOS development task for continuous integration or cloud-based servers&nbsp;</li><li>Understanding the background working of tools like <a class="link" href="https://fastlane.tools/">Fastlane</a>&nbsp;</li></ul><h2 class="heading-node" id="k829yqqxm" style="text-align: justify">Automating Build Generation – Overall Process</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-img1.webp" alt="M2P Fintech" title="" width="100%" height="253"><ul class="list-node" id="2rh1i4is1"><li>Setting up the project and creating a repository in Bit Bucket&nbsp;</li><li>Connecting local Jenkins with Bit Bucket cloud to check out as project branch (to build as an IPA)&nbsp;</li><li>Connecting Jenkins and Fastlane for building and archiving the project</li><li>Moving the archived IPA to TestFlight from Fastlane</li></ul><h2 class="heading-node" id="718gbf2sl" style="text-align: justify">Build Generation using Command Line</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-img2.webp" alt="M2P Fintech" title="" width="100%" height="261">Let’s assume that a project is developed by multiple engineers where they all must perform the following.&nbsp;<ul class="list-node" id="8xgwyb9oq"><li>Checking out the project from Bit Bucket to local system&nbsp;</li><li>Archiving the particular branch of the project using command line&nbsp;</li></ul>After following the above processes, the IPA is generated inside the project folder.&nbsp; To understand the command line deployment process, we should have the following things set up in advance before starting the build generation. &nbsp;<h2 class="heading-node" id="wl1vjw4rj" style="text-align: justify">Pre-requisites</h2><ul class="list-node" id="zxps2bfin"><li>Sample app with Xcode workspace - e.g., FintechBase.xcworkspace &nbsp;</li><li>Xcode Scheme with Release configuration - e.g., Developement &nbsp;</li></ul><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-3.webp" alt="M2P Fintech" title="" width="100%" height="270"><ul class="list-node" id="yyqu3ol0l"><li>Certificates, AppID, Provisioning profiles setup for production in iTunes Connect - Use <a class="link" href="https://help.apple.com/xcode/mac/current/#/dev60b6fbbc7">Apple’s documentation</a> for setting up&nbsp;</li><li>macOS with Distribution certificate in the keychain &nbsp;</li></ul><h3 class="heading-node" id="8sncc4746" style="text-align: justify">Analyzing &nbsp;</h3>We perform static analysis of the source code. The xcodebuild has the ability to clean and analyze the source code for any common syntax errors. &nbsp;<h3 class="heading-node" id="ceoujw6ub" style="text-align: justify">Code for analyzing the project using the terminal&nbsp;&nbsp;</h3>xcodebuild - workspace FintechBase.xcworkspace -scheme Development -sdkiphonesimulator10.3 clean analyze &nbsp;<h3 class="heading-node" id="kfx4bsyjr" style="text-align: justify">Building &nbsp; &nbsp;</h3>We can build an iOS app using xcodebuild ‘build’ action which can generate the derived data for our iOS app. Once the application is built, it can run inside the simulator or can be used by the test bundle. &nbsp;<h3 class="heading-node" id="2l3qqcg9r" style="text-align: justify">Build for running &nbsp;</h3>We can simply build our app to run inside simulators by using the command &nbsp;xcodebuild -workspace FintechBase.xcworkspace -scheme Development -configuration Release -allowProvisioningUpdates build &nbsp;<h3 class="heading-node" id="qpt6jm8bp" style="text-align: justify"> Archiving </h3>Most of the iOS engineers face difficulties in archiving an iOS application as it deals with provisioning profiles, certificates, and build configurations.&nbsp;To upload an app to iTunes Connect or deploy it on to the provisioned devices, we need to build an app for generic iOS device destination as well as export it in the IPA format. &nbsp;Next step is building our application with release configuration scheme ‘Development’ with generic iOS device destination. &nbsp; &nbsp;There are two steps involved.&nbsp;<ul class="list-node" id="lt01qgpu1"><li>Building an archive with xcodebuild archive &nbsp;</li><li>Creating the .ipa file with xcodebuild -exportArchive &nbsp;</li></ul><h4 class="heading-node" id="uimw8zxqa" style="text-align: justify">Without Team ID &nbsp;</h4>xcodebuild archive -workspace FintechBase.xcworkspace -scheme Development clean build archive  -archivePath ./build/FintechBase.xcarchive &nbsp;<h4 class="heading-node" id="lw00yqpeu" style="text-align: justify">With Team ID &nbsp;</h4>xcodebuild archive -workspace FintechBase.xcworkspace -scheme Development DEVELOPMENT_TEAM="XXXXXXXXXX" -allowProvisioningUpdates  -archivePath ./build/FintechBase.xcarchive &nbsp;<h4 class="heading-node" id="b1r52lons" style="text-align: justify">Note&nbsp;</h4><ul class="list-node" id="r267dseji"><li>The build is created using the above command build/FintechBase.xcarchive&nbsp;</li><li>Replace ‘XXXXXXXXX’ with your team ID&nbsp;</li></ul>We now export the .ipa using the command&nbsp;xcodebuild -exportArchive -allowProvisioningUpdates -archivePath  ./build/FintechBase.xcarchive -exportPath ./build/ -exportOptionsPlist ./build/ExportOptions.plist &nbsp;Note that the above command requires a ExportOptions argument that points to a .plist file with export options. For a complete list of what you can put in that plist, run xcodebuild -help.&nbsp;&nbsp;Create build folder in a project and add ExportOptions.plist<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-1-1.webp" alt="M2P Fintech" title="" width="100%" height="530"><h4 class="heading-node" id="q4fzt0obs" style="text-align: justify">Find the sample code for ExportOptions</h4><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-2-1.webp" alt="M2P Fintech" title="" width="100%" height="199">&lt;?xml version="1.0" encoding="UTF-8"?&gt; &nbsp;&lt;!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""<a class="link" href="http://www.apple.com/DTDs/PropertyList-1.0.dtd">http://www.apple.com/DTDs/PropertyList-1.0.dtd</a>"&gt; &nbsp;&lt;plist version="1.0"&gt; &nbsp;&lt;dict&gt; &nbsp;&lt;key&gt;generateAppStoreInformation&lt;/key&gt; &nbsp;&lt;false/&gt; &nbsp;&lt;key&gt;manageAppVersionAndBuildNumber&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;key&gt;method&lt;/key&gt; &nbsp;&lt;string&gt;app-store&lt;/string&gt; &nbsp;&lt;key&gt;signingStyle&lt;/key&gt; &nbsp;&lt;string&gt;automatic&lt;/string&gt; &nbsp;&lt;key&gt;stripSwiftSymbols&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;key&gt;teamID&lt;/key&gt; &nbsp;&lt;string&gt;XXXXXXXXXX&lt;/string&gt; &nbsp;&lt;key&gt;uploadSymbols&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;/dict&gt; &nbsp;&lt;/plist&gt; &nbsp; &nbsp;<h4 class="heading-node" id="ga13psli6" style="text-align: justify">Export Options</h4><ul class="list-node" id="kmyta6keu"><li>method: (String) The method of distribution, which can be set as any of the following: <ul class="list-node" id="vjjzjfgiv"><li>app-store &nbsp;</li><li>enterprise &nbsp;</li><li>ad-hoc </li><li>development &nbsp;</li></ul></li></ul><ul class="list-node" id="6jmqzfr7a"><li>teamID: (String) The development program team identifier. </li><li>signingtyle: (String) Automatic Signing “automatic”, incase of manual signing mention “manual” add provisioningProfiles and signingCertificate </li><li>uploadBitcode: (Boolean) Option to include Bitcode. </li><li>manageAppVersionAndBuildNumber: to ensure that you have already updated your version/build number before archiving</li><li>generateAppStoreInformation: For App Store exports, should Xcode generate App Store Information for uploading with iTMSTransporter. Defaults to NO </li><li>uploadSymbols: Should symbols be stripped from Swift libraries in your IPA. Defaults to YES</li></ul> &nbsp;After successfully running the command, the ipa file will be generated inside the build folder in the name of FintechBase.ipa&nbsp;The next step involves automating the build generation using Fastlane and pushing it to TestFlight which we will be covering in the next blog.&nbsp;Till then, Stay tuned!&nbsp;Have any questions/suggestions?&nbsp;&nbsp;&nbsp;Write to us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>. Our expert team will get in touch with you.&nbsp;&nbsp;&nbsp;<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a> to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.&nbsp;Follow us on <a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a> and <a class="link" href="https://twitter.com/m2pfintech">Twitter</a> for insightful fintech bytes curated for curious minds like you.&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;

CI/CD Pipeline for iOS build generation using Jenkins

&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/Creative-for-SSL.webp" alt="M2P Fintech" title="" width="100%" height="253">Welcome to our latest blog, where we dive into the critical security technique known as SSL Pinning. This method plays a pivotal role in thwarting eavesdropping attacks on the communication between an app and its server.SSL Pinning involves a process where, after the initial exchange of encryption keys, the app verifies the validity of the server's certificate. It achieves this by maintaining a list of trusted certificates on the device itself, which are then compared to the server's certificate in real time as the app operates.&nbsp;If there is a discrepancy, indicating that the server's certificate does not align with the trusted ones, the app promptly halts the connection.&nbsp;Types of SSL Pinning:<ul class="list-node" id="c5h0hkum0"><li>SSL Pinning using Certificate: This method has the drawback that we must update the app each time the pinned certificate expires. However, by anchoring upcoming certificates in the application, this problem may be resolved. We may use the hashed public key, which won't change for subsequent certifications, rather than pinning the entire certificate.&nbsp;</li></ul><ul class="list-node" id="8d24u2471"><li>SSL Pinning using server Public key:&nbsp;This method includes attaching the certificate's public key (certificate expiration need not be a concern here).</li></ul>Mobile applications must retrieve data from the server to display it to consumers. However, private data, such as the user's login and password, is occasionally transmitted between the program and the server. SSL Pinning is mainly used in the prevention of man-in-the-middle attacks.Man-In-The-Middle Attack &nbsp;This type of attack allows the attacker to covertly view data passed from the client to the server by using a specialized server called an SSL proxy. It is a tool that encrypts and decrypts data between the client and the server using different keys for each direction. Charles, a proxy server used for testing, is one such example. It works in several phases to intercept and analyze the data between the app and the server.  By sitting between the app and the internet, it allows you to examine and modify data in real-time to test the response of the application.&nbsp;<ol class="list-node" id="xyrs1alxr"><li>Instead of using the server's key to encrypt data, your app utilizes the public key of the Charles ProxyCertificate. The Charles Certificate is considered valid because the developer can install it on their device.&nbsp;</li><li><a class="link" href="https://www.kodeco.com/21931256-charles-proxy-tutorial-for-ios">Charles</a> may connect to the server using its public key after using its private key to decode all the data. Be aware that any developer can read all the data that your app sends over the network. &nbsp;</li></ol>SSL Pinning using Public Key &nbsp;<ul class="list-node" id="r0h4qy5p1"><li>Get public certificates using OpenSSL by typing a command in the terminal/console to get the PEM key. &nbsp;</li></ul>echo "Get HTTP/1.0" | openssl s_client -showcerts -connectwww.MyDomainName.com:443 &gt; myPemCertificateName.pem &nbsp;<ul class="list-node" id="93uejjeug"><li>Type this command to turn the created PEM key into .der format.</li></ul>openssl x509 -in "myPemFileName.pem" -inform PEM -out "myDerFileName.der" -outform DER &nbsp;<ul class="list-node" id="62sgzhr0g"><li>Use this command to get the public key from the URL in SHA256 format. &nbsp;</li></ul>openssl s_client -connect www.MyDomainName.com:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 &nbsp;<ul class="list-node" id="bos2d0jr8"><li>443 is the safe port for HTTPS. If your website uses a different port, use that number instead of 443. &nbsp;</li><li>The result should look like this. &nbsp;</li></ul>A3r26k+KOMuKJHB5B67cpGqqPhF/GNUyNl2EPJKB65KJUe+hXMn1k= &nbsp;<ul class="list-node" id="munqf5sov"><li>Generate the Hash Key using this <a class="link" href="https://www.ssllabs.com/ssltest/">link</a> as well. &nbsp;</li></ul><ul class="list-node" id="a5wc1jmum"><li>Create a variable to store the Public key that we get from the certificate. &nbsp;</li></ul>static let sslPublicKey ="A3r26k+KOMuKJHB5B67cpGqqPhF/GNUyN2EPJKB6KJUe+hXMn1k=" &nbsp;Pinning with Alamofire &nbsp;<ul class="list-node" id="vlgnafls0"><li>Using the regular API can be complicated. Using Alamofire is recommended because it is an external library that offers a simpler way to work with APIs, making your life easier. &nbsp;</li><li>The ServerTrustEvaluating protocol is the foundation of everything. It allows us to evaluate server trust in various ways. Alamofire has several trust evaluators. You can read the full documentation <a class="link" href="https://github.com/Alamofire/Alamofire/blob/master/Documentation/AdvancedUsage.md#security">here</a>. &nbsp;</li><li>Select the ServerTrustEvaluator for each API. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss1.webp" alt="M2P Fintech" title="" width="100%" height="138"><ul class="list-node" id="7fgyhm915"><li>Then create a session with them, and you can customize your configuration. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss2.webp" alt="M2P Fintech" title="" width="100%" height="88"><ul class="list-node" id="p64ip70za"><li>rsa2048Asn1Header is a list of whole numbers that shows the algorithm and any additional information used with the public key. &nbsp;</li><li>This private func sha256(data: Data) -&gt; String function creates a coded hash using the sha256 method for the given data and encodes it in base64. &nbsp;</li><li>import CommonCrypto for sha256 algorithm &nbsp;</li><li>In SessionDelegate, the URLAuthenticationChallenge method is used to get ServerPublicKeyData &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss3.webp" alt="M2P Fintech" title="" width="100%" height="44"><ul class="list-node" id="0b7oumb7i"><li>We can perform some actions using this delegate method and match our Public Key with Server Public Key. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss4.webp" alt="M2P Fintech" title="" width="100%" height="569">Implementing SSL pinning using a public key in iOS enhances security by ensuring that only trusted servers with specific public keys can establish connections. This method mitigates the risks associated with man-in-the-middle attacks and unauthorized access to sensitive data, providing users with a more secure experience.Stay tuned for more blogs on tech, engineering, and iOS development.&nbsp;This blog is written by <a class="link" href="https://teams.microsoft.com/l/message/19:2ef83816-29e0-4b52-8caa-64b0aeca1ec1_dd9ec8f1-8445-4b0a-92af-aa769014f3db@unq.gbl.spaces/1709882415989?context=%7B%22contextType%22%3A%22chat%22%7D">Senthilkumar</a>, SDE 2 – Product Engineering at M2P.

Setting up SSL Pinning using Public Key in Swift

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/04/Penetration-testing-banner1.webp" alt="M2P Fintech" title="" width="100%" height="253">The $158.9 billion fintech industry thrives on mobile apps. Android dominates the mobile app market with a whopping 71.65% market share. Though in demand globally, its open-source&nbsp;nature makes data security a vulnerability in Android apps. Even <a class="link" href="https://m2pfintech.com/blog/super-apps-in-consumer-banking-what-role-does-open-banking-play/">super apps</a> are no exception.&nbsp;Developing and releasing a fully functional and secure Android application is a critical challenge for app developers. Managing app functionality is the easy part; but the real challenge is making the Android application secure and resilient to cyberattacks. &nbsp;What’s the best way to do this?&nbsp;Our Software Development Engineer, <a class="link" href="https://www.linkedin.com/in/sundaramanikandan-l-80957014b/">Sundaramanikandan</a> has hands-on experience in developing highly secure Android apps and will take us through every step in mitigating cyberattacks while developing an app. &nbsp;First things first, every developer must prioritize security to protect users and their data. The security-first approach will benefit the 6.92 billion smartphone users in the world, who constitute over 86.29% of the global population.&nbsp;&nbsp;Remember that the advances in digitization and technology also apply to hackers and cybercriminals. Technology that makes lives easier has increased our exposure to risks. Fraudsters ride on the vulnerabilities by using more sophisticated techniques to exploit loopholes and evade detection while breaking into systems to access sensitive data.&nbsp;<h2 class="heading-node" id="sdulm87wi" style="text-align: justify">How to secure Android devices from attackers?&nbsp;</h2>Developers and organizations need to deploy secure software development lifecycle practices to protect against data breaches or theft. Public Wi-Fi networks and other wireless communication systems should be blocked to prevent man-in-the-middle attacks and other unsecured communication exploits. Attackers can pretend to be real web services, steal data, or listen in on calls and texts by taking over a user's mobile signal.&nbsp;<h2 class="heading-node" id="d5lk42h71" style="text-align: justify">Smartphone rooting to get superuser permissions&nbsp;&nbsp;&nbsp;</h2>Firstly, the process called rooting is done, i.e., removing the limitations on a mobile or tablet running the Android operating system. It lets you get root access to the code of the Android operating system (the equivalent term for Apple devices is jailbreaking). It gives permission to change the device's software code or install software that the manufacturer wouldn't normally let us do.&nbsp;<h2 class="heading-node" id="oj87o5xpb" style="text-align: justify">Cons of running apps on a rooted device&nbsp;</h2>Simply put, it opens higher risks like spoofing, cheating, and abuse of core functionalities. A root-level app can easily set up backdoors that let unauthorized users get into the device and then into the secure corporate network. When you "root" your Android device, you give apps unauthorized access to your operating system and sensitive data. It further leads to the theft of user data, finances, intellectual property, and piracy. Some malware apps specifically go after rooted devices to infect system-level files. So, you must be careful what you install.&nbsp;Targeted cyberattacks on corporates are on the rise as more and more business transactions are done on mobile devices. Rooted Android devices make it easier to sneak into the corporate network. For a financial app, if an attacker can intercept a network call and change the address, the victim could lose a lot of money, and the company that developed the app will lose its reputation.&nbsp;As having a user-friendly mobile app is a key differentiator, banks and financial institutions are in a dilemma to choose between allowing their app, which contains excellent payment functionalities and extremely sensitive data, to run on rooted/jailbroken devices or risk losing their target audience. Or they can opt for the middle ground by mitigating the risks of the app running on rooted devices. This compromise is critical. Or else, risks such as malware, man-in-the-middle attacks, and system API hijacking could lead to user data exfiltration. &nbsp;Therefore, Android app installation must be blocked on rooted devices to prevent attacks specifically targeting users who have rooted their smartphones.&nbsp;<h2 class="heading-node" id="78wzaxox3" style="text-align: justify">How can app developers block Android installation on a rooted device?&nbsp;</h2>Every Android app developer should understand the following pointers below to steer clear of the hazards of rooted devices.&nbsp; What’s the common way an app can be tampered with?&nbsp;<ol class="list-node" id="lwmuzqjzn"><li>ByPassing root detection logic implemented&nbsp;&nbsp;</li><li>ByPassing the SSL Pinning&nbsp;</li></ol>What are the commonly used hacking tools?&nbsp;<ol class="list-node" id="tym0kml1c"><li>Magisk&nbsp;</li><li>LSXposed Framework&nbsp;</li></ol>Dos and Don’ts - for infosec clearance to block Android app installation&nbsp;Don’ts&nbsp;❌ Install the app on a rooted device&nbsp;❌ Tapjack&nbsp;❌ Copy/paste sensitive data&nbsp;❌ Take screenshots&nbsp;&nbsp;Dos&nbsp;Now, the following method will help create the most comprehensive approach:&nbsp;✅ Check if the app is running in emulator&nbsp;This is the first thing we need to look at when the app is launched. If a hacker extracts the APK and tries to run it in an emulator/simulator, we should stop running the app if it is a production version. This functionality can be built as an extension function and utilized in the application's base activity.&nbsp;<pre class="block-node"><code>val isRunningOnEmulator: Boolean by lazy {
&nbsp;&nbsp;&nbsp; // Android SDK emulator
&nbsp;&nbsp;&nbsp; return@lazy ((Build.FINGERPRINT.startsWith(“google/sdk_gphone_”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &amp;&amp; Build.FINGERPRINT.endsWith(“:user/release-keys”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &amp;&amp; Build.MANUFACTURER == “Google” &amp;&amp; 
Build.PRODUCT.startsWith(“sdk_gphone_”) &amp;&amp; Build.BRAND == “google”
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &amp;&amp; Build.MODEL.startsWith(“sdk_gphone_”))
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.HARDWARE.contains(“goldfish”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.HARDWARE.contains(“ranchu”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“sdk_gphone64_arm64”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“vbox86p”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“emulator”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“simulator”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.FINGERPRINT.startsWith(“generic”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.FINGERPRINT.startsWith(“unknown”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“sdk_google”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MODEL.contains(“google_sdk”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT.contains(“sdk_x86”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MODEL.contains(“Emulator”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MODEL.contains(“Android SDK built for x86”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || “QC_Reference_Phone” == Build.BOARD &amp;&amp; !“Xiaomi”.equals(
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Build.MANUFACTURER,
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ignoreCase = true
&nbsp;&nbsp;&nbsp; )
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.MANUFACTURER.contains(“Genymotion”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.HOST.startsWith(“Build”) //MSI App Player
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.BRAND.startsWith(“generic”) &amp;&amp; Build.DEVICE.startsWith(“generic”)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; || Build.PRODUCT == “google_sdk”)
}&nbsp;

✅ Check developer options&nbsp;

Hooking an app is as simple as enabling the developer settings on the device and connecting to the Android SDK tool. Hence, when the app is launched, we must determine whether the developer option is enabled or not by writing an extension function.&nbsp;

fun isDevMode(context: Context): Boolean {&nbsp;
&nbsp;&nbsp;&nbsp; return when {&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Build.VERSION.SDK_INT &gt; Build.VERSION_CODES.JELLY_BEAN -&gt; {&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Secure.getInt(&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; context.contentResolver,&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Global.DEVELOPMENT_SETTINGS_ENABLED, 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ) != 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Build.VERSION.SDK_INT == Build.VERSION_CODES.JELLY_BEAN -&gt; {&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; @Suppress(“DEPRECATION”)&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Secure.getInt(&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; context.contentResolver,&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Settings.Secure.DEVELOPMENT_SETTINGS_ENABLED, 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ) != 0&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; else -&gt; false&nbsp;
&nbsp;&nbsp;&nbsp; }&nbsp;
}&nbsp;

✅ Check if the device is rooted&nbsp;&nbsp;

The Util class is commonly used to determine whether a device is rooted, or the super user “SU” is enabled.&nbsp;

private val binaryPaths = arrayOf(
&nbsp;&nbsp;&nbsp; “/data/local/”,
&nbsp;&nbsp;&nbsp; “/data/local/bin/”,
&nbsp;&nbsp;&nbsp; “/data/local/tmp/”,
&nbsp;&nbsp;&nbsp; “/data/local/xbin/”,
&nbsp;&nbsp;&nbsp; “/sbin/”,
&nbsp;&nbsp;&nbsp; “/su/bin/”,
&nbsp;&nbsp;&nbsp; “/system/bin/”,
&nbsp;&nbsp;&nbsp; “/system/bin/.ext/”,
&nbsp;&nbsp;&nbsp; “/system/bin/failsafe/”,
&nbsp;&nbsp;&nbsp; “/system/sd/xbin/”,
&nbsp;&nbsp;&nbsp; “/system/usr/we-need-root/”,
&nbsp;&nbsp;&nbsp; “/system/xbin/”,
&nbsp;&nbsp;&nbsp; “/system/app/Superuser.apk”,
&nbsp;&nbsp;&nbsp; “/cache”,
&nbsp;&nbsp;&nbsp; “/data”,
&nbsp;&nbsp;&nbsp; “/dev”,

&nbsp;&nbsp;&nbsp; “/sbin/su”,
&nbsp;&nbsp;&nbsp; “/system/bin/su”,
&nbsp;&nbsp;&nbsp; “/system/xbin/su”,
&nbsp;&nbsp;&nbsp; “/data/local/xbin/su”,
&nbsp;&nbsp;&nbsp; “/data/local/bin/su”,
&nbsp;&nbsp;&nbsp; “/system/sd/xbin/su”,
&nbsp;&nbsp;&nbsp; “/system/bin/failsafe/su”,
&nbsp;&nbsp;&nbsp; “/data/local/su”,
&nbsp;&nbsp;&nbsp; “/su/bin/su”,
&nbsp;&nbsp;&nbsp; “./frida-server”,
&nbsp;&nbsp;&nbsp; “/data/local/tmp/frida-server”

)&nbsp;

&nbsp;When this class is called upon app launch, it checks to see whether any of the aforementioned binaries are present on the device and returns “rooted” if any are.&nbsp;

✅ Integrate root detection library like RootBear&nbsp;

RootBear is a popular open-source library that can be utilized in our app to detect root causes.&nbsp;

implementation ‘com.scottyab:rootbeer-lib:0.1.0′&nbsp;

After adding this library in the app build Gradle file, it can be implemented in a base activity like:&nbsp;

if (!BuildConfig.DEBUG &amp;&amp; rootBeer.isRooted) {
&nbsp;&nbsp;&nbsp; showRootedDeviceDialog(getString(R.string.device_rooted))
&nbsp;&nbsp;&nbsp; isRootedDeviceBool = true
} else if (!BuildConfig.DEBUG &amp;&amp; rootBeer.isRootedWithBusyBoxCheck) {
&nbsp;&nbsp;&nbsp; showRootedDeviceDialog(getString(R.string.device_rooted))
&nbsp;&nbsp;&nbsp; isRootedDeviceBool = true
}&nbsp;&nbsp; 
</code></pre>Now, all the steps discussed around a great way to prevent an Android app from being installed or functioning on a rooted device. &nbsp;But this is not all. There is more.&nbsp;There is another tool called ‘Frida’ that helps bypass all the above logics implemented in an app.&nbsp;Want to know how to block Frida?&nbsp;Stay tuned to our next blog!&nbsp;This article is authored by&nbsp;<a class="link" href="https://www.linkedin.com/in/sundaramanikandan-l-80957014b/">Sundaramanikandan.</a><a class="link fui-Link ___1qmgydl f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq" href="https://m2pfintech.com/newsletter/" target="_blank" rel="noreferrer noopener">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link fui-Link ___1qmgydl f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq" href="https://www.linkedin.com/company/m2pfintech/mycompany/" target="_blank" rel="noreferrer noopener">LinkedIn</a>&nbsp;and&nbsp;<a class="link fui-Link ___1qmgydl f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq" href="https://twitter.com/m2pfintech" target="_blank" rel="noreferrer noopener">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

How to block Android App installation in a Rooted Device

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/05/banner-1-1.webp" alt="M2P Fintech" title="" width="100%" height="358">Payment Tokenization — One technology to make all the stakeholders of digital transactions happy!<blockquote class="block-node" id="pcv6p2tv7">“Tokenization market worth is estimated to be $4.8 Billion by 2025.”-&nbsp;Markets and Markets</blockquote>Simply put, the word “Tokenize” means substituting, and it is an ingenious concept introduced in 2005 by Shift4payments to protect cardholder data. It factored in data security at its core and is now a popular term due to the surge in online transactions.In fact, a token is a concept that has been long around; for example, the coins that we buy in the gaming arcade or a casino have no value outside the premises. But inside the building, you get to buy your stakes or favorite superhero toy. Likewise, tokens replace or mask the sensitive data in the online transaction by replacing it with random alphanumeric characters.By enabling payment tokenization, the merchants and networks can move data without the hovering threat of payments fraud or identity theft. Tokenization helps in finding a perfect balance between “data security” and “user experience.”<h2 class="heading-node" id="5806" style="text-align: justify">What is ‘Tokenization’ in payments?</h2>In the world of payments, the card account number is masked by a single-use randomized alphanumeric character of the same length. This camouflage is called tokenization in payments. Meaning, each account number is now a ‘Token’ representing the original confidential information. In contrast, the actual data is stored safely in a digital token vault.It is also referred to as ‘Credit Card tokenization’&nbsp;interchangeably. It helps in removing the credit card information from the internal network or database. The concept is more popular with <a class="link" href="https://m2pfintech.com/blog/credit-card-processing-a-definitive-guide/">credit cards</a> as it involves a higher magnitude of the fraud.<h2 class="heading-node" id="8f6f" style="text-align: justify">Why do we need Payment tokenization?</h2>Pandemic fostered digital transactions at a faster pace than ever before indeed. As there is an increase in digital commerce, businesses came up with enhanced solutions that facilitated online transactions to confront consumer preferences.Improved digital transactions put security under question. While the consumers are worried about their sensitive data being visible to many online platforms, the merchants fret about losing loyal customers.‘Tokens — the trustworthy representatives,’ alleviates these roadblocks effectively as the original data (ex: credit card number) never reaches the merchant’s server. The merchants enjoy retaining the customers without compromising the reputation while staying <a class="link" href="https://m2pfintech.com/blog/pci-dss-the-payments-armour/">PCI-DSS</a> (Payment Card Industry Data Security Standard) compliant.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/05/int.webp" alt="M2P Fintech" title="" id="92tjhlk3p" width="100%" height="358"><h2 class="heading-node" id="aa74" style="text-align: justify">How does Payment Tokenization/Credit Card tokenization work in action?</h2>Tokenization is not a costlier technology as it sounds. Any organization can adopt it irrespective of the structure and size. It is ideal for organizations that cannot afford to spend more on sophisticated encryption algorithms or infrastructure to secure the data.Let’s see an example,<ul class="list-node" id="a9ehiej48"><li>Sara orders a pair of sports shoes on Amazon. After choosing all her preferences, she reaches the payment section.</li><li>She enters the sensitive data on the portal (credit card number, cardholder name, etc.)</li><li>This goes straight to the tokenization server without storing any data in the amazon application’s server</li><li>There are many tokenization providers in the market like Fiserv, Mastercard, American Express, TokenEx, 3D Delta Systems, Meawallet, etc.</li><li>Then it reaches the token vault, where the original data is secure. It, in turn, returns a&nbsp;token&nbsp;of randomized alphanumeric representation of the same length.</li><li>This has no relation to the original data, like in the typical&nbsp;‘data encryption&nbsp;process. The actual data is contained within the ciphered text. Tokens are, in general, generated by mathematical algorithms.</li><li>This token is now passed to the merchant’s acquirer bank, and this bank passes the token to the credit card network.</li><li>Then the card network processes the token and maps it to the customer’s account number, authorizes and passes it to the issuing bank.</li><li>The issuer bank now authorizes or denies the transaction based on the fund balance.</li><li>After the successful transaction, a unique token returns to the merchant.</li><li>Amazon now has no record of Sara’s sensitive original information but her tokens. In this way, Amazon can enable Sara to make one-click payments the next time she shops.</li></ul>It is evident that&nbsp;tokenization checks all the mandates of refined digital transactions. Sara is now happy with her brand-new sports shoes while securing her data in the vault. Getting the data from the vault is not an easy piece of cake. It requires multiple authentication levels, service charges, etc., to verify if a trusted party raised it.<h2 class="heading-node" id="4357" style="text-align: justify">Then it also brings forth the question is Tokenization and Encryption one and the same?</h2>The answer is definitely no.The tokenized data cannot be reversed to reveal the original card number. In contrast, encryption takes a card number, transforms it into ciphertext by running it through an algorithm. To unlock the ciphertext, it has to be decrypted using an encryption key.On the other hand, tokenization uses no algorithm or requires a key to unlock the original data.<h2 class="heading-node" id="b70f" style="text-align: justify">Does Credit Card Tokenization impact a change in the payment process?</h2>No.The end-user will not find any difference in their transactions even after the implementation of tokenization. The entire process happens at the backend without intervening in the user experience. Tokens are generated online and eliminate the need to wait.<h2 class="heading-node" id="744e" style="text-align: justify">Why is Payment Tokenization a ‘Fintech Asset’?</h2>The boom of technology in the Financial services domain has been rapid in the past decade. Card-less transactions, <a class="link" href="https://m2pfintech.com/blog/remittance-with-upi-a-giant-leap-for-cross-border-payments/">UPI payments</a>, <a class="link" href="https://m2pfintech.com/blog/what-is-a-payment-gateway-and-payment-switch-understanding-the-basics-of-payments-architecture/">Payment Gateways</a>, etc., increases online consumers each day. As we enjoy the perks of digital banking with one-click transactions, we cannot deny the fact that our data is vulnerable to “Social Engineering.”Social Engineering is everywhere. We may fall into the trap of hackers and leave a lot of confidential information during digital transactions. There are multiple intrusion points for the hackers to lure in when the transactions float over the network and wipe away our savings.Given this scenario, tokenization is indeed an asset to Fintech. Because even if a hacker tries to sneak into the network, all he can find is randomized alphanumeric and characters with no relation to the original data (PAN number, credit card number, etc.)It is expensive for merchants to become <a class="link" href="https://m2pfintech.com/blog/pci-dss-a-quick-guide-to-its-levels/">PCI DSS</a> compliant and qualify themselves as a trustworthy eCommerce merchant for the consumers. They have to undergo a lengthy auditing process, and it is an ongoing process. With the help of&nbsp;‘Tokenization,’&nbsp;merchants can save a hefty amount of money as the scope of <a class="link" href="https://m2pfintech.com/blog/pci-dss-the-payments-armour/">PCI DSS</a> compliance is reduced in storing the user’s confidential information.Apart from banking,&nbsp;‘credit card tokenization’&nbsp;builds confidence among the investors as it secures the money with ease. We could see the boom of Blockchain technology-based fintech solutions gaining momentum across the nations.&nbsp;“Tokenization”&nbsp;is also seen as the key to drive blockchain implementation in the future by accompanying cryptocurrency transactions.Finally, it also offers substantial benefits to all stakeholders involved in the transaction:<ul class="list-node" id="nexhxh9e5"><li>Issuers witness a notable decrease in payment fraud in both channels of online and mobile transactions.</li><li>Acquirers, merchants, and processors experience a lower risk of accessible, sensitive cardholder data if compromised by cyber attacks.</li><li>Merchants will wield a powerful mechanism that lets them innovate better retail experiences minus the responsibility of storing and handling sensitive data.</li><li>Customers need not enter their details every time they make an online purchase from smartphones, tablets, or PCs.</li></ul>Payments tokenization makes all the parties — consumers; merchants; payment gateway providers, banking institutions, regulatory bodies feel safe, secure, and happy with their buying and selling processes.Tokenizing confidential data makes way for turbulence-free secure digital transactions!<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

How Does Payment Tokenization Work?

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/09/MicrosoftTeams-image-9.webp" alt="M2P Fintech" title="" width="100%" height="253">The world of banking has transformed over the years. Customer experience has now become a key differentiator. Personalization, speed, convenience, and security have evolved as factors that determine profitability.To keep pace with the changing customer expectations and the competitive landscape, banks need to modernize their core banking systems. Only then can they scale technology innovation, upgrade processes, and re-engineer their workforce to deliver mobile-first, personalized customer experiences while reducing cost and complexities.Go beyond the surface and explore more.<ul class="list-node" id="dnjdyenon"><li><a class="link" href="#21">What are Core Banking Systems?</a></li><li><a class="link" href="#11">Evolution of Core Banking Systems</a></li><li><a class="link" href="#31">Turing Core Banking System (CBS)</a></li><li><a class="link" href="#41">What’s New in Core Banking?</a></li><li><a class="link" href="#51">Final Word</a></li></ul><h2 class="heading-node" id="21" style="text-align: left">What are Core Banking Systems?</h2>Centralized Online Real-time Environment (CORE) banking systems serve as the technical infrastructure that enables banks to manage their day-to-day operations efficiently and seamlessly. They facilitate branch agnostic transactions across multiple touchpoints worldwide.Hosted on-premise or in the cloud, core banking provide a singular view of customer data to facilitate information flow and operational excellence across delivery channels. It simplifies services such as new account creation, customer relationship management, transaction processing, loan issuing, and servicing. Banks can achieve greater cost and operational efficiencies by making the big shift from legacy to modern <a class="link" href="https://m2pfintech.com/blog/core-banking-essentials-types-components-advantages/">core banking solutions</a>.<h2 class="heading-node" id="11" style="text-align: left">Evolution of Core Banking Systems</h2>Core banking is not a new phenomenon. It had a humble beginning in the 1970s with rigid codes and basic computerizations and evolved with technological advances, product innovations, and customer requirements to be what it is today.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/09/Infpgraphic-1.webp" alt="M2P Fintech" title="" width="100%" height="253"><h3 class="heading-node" id="hefhm2ugl" style="text-align: left">1st Generation Core Banking System – Basic Computerization</h3>From 1970 to 1990 CBS began taking root in the banking industry. At its most primal form, the system functioned on basic computerization techniques and was developed in-house by most banks.The 1st gen CBS used monolithic applications that were based on complex codes. The IT costs were quite high, and it offered only a few basic features like transaction execution, record-keeping, and customer data management. Sequential data were stored in silos, and transactions were processed in batches at the end of the day.So, <a class="link" href="https://m2pfintech.com/blog/tale-of-money-transfers-from-hawala-to-one-click-remittances/">money transfers</a> and <a class="link" href="https://m2pfintech.com/blog/future-of-payments-processing-matched-with-industry-needs/">payments</a> could not be processed in real-time. The applications were accessible to users only during counter hours. The system was prone to data loss and was difficult to replace without causing a service disruption.<h3 class="heading-node" id="lk1xsezsg" style="text-align: left">2nd Generation Core Banking System - Product-centric Digital Interface</h3>From 1990 to 2005, CBS was in its product-centric avatar with a penchant for digital interfaces. The infrastructure developments were outsourced to external parties that focused on building a vibrant user interface for 24/7 access to banking services.Software modules and a few subroutines were introduced to improve the flexibility of the code. But, even after several optimization trials, the code remained complex. This made processing large volumes of transactions tougher. And banking data were still organized in silos.Client programs were slowly added even though the standards were still mainframes. Software that was previously accessible through branch networks now became available to customers at ATMs and payment terminals. However, during maintenance, the system still faced prolonged service disruption.<h3 class="heading-node" id="i8wq3v74b" style="text-align: left">3rd Generation Core Banking System - Customer-centric Processes</h3>2010 was the year 3rd generation CBS came into prevalence. It was a major leap from the yesteryear computerizations and product-centric interfaces. CBS became more customer-centric, and banks began building a digital layer to improve flexibility.The first programming interfaces appeared, and the core banking software was accessible on the Internet. The software architecture became less monolithic, and the system started to adapt to newer structures, such as Application Service Providers (ASPs) and Service-Oriented Architectures (SOAs).On the user experience side, newer milestones were achieved, and now version changes could be performed in a shorter span of time. Truly graphic interfaces in HTML and Windows pages were introduced.The infrastructure was completely customer focused. But things started to change when the pandemic struck in 2020. Customer needs, expectations, journeys, and touchpoints underwent a radical transformation.Modern core banking systems came around to save the day. It kickstarted digital transformation in traditional banks and helped new-age banks accelerate next-gen customer experience. API-led core banking architectures enable banks to scale reliable and strong banking ecosystems with frictionless, rapid integrations.<h3 class="heading-node" id="2ndpajyzi" style="text-align: left">4th Generation - Next-gen Core Banking via Platformization</h3>After 2020, 4th generation core banking systems came into prevalence. Platformization of CBS evolved as a crucial development, transforming the core from being only a system to becoming a complete platform.Going beyond traditional models, modern core banking platforms give banks the agility to scale and fully leverage the potential of digital revolution to satisfy stakeholders such as customers, employees, regulators, and partners.&nbsp;However, traditional banks with legacy core banking platforms still grapple with silos, code rigidity, and complexities. Even though their financial processes are automated and newer distribution channels are in place, legacy systems hinder adaptive flexibility to changing customer journeys and behavior, closed ecosystems, and vendor lock-ins. They also result in higher maintenance costs, slower GTM speed, and do not support instant releases.<a class="link" href="https://m2pfintech.com/blog/unlock-the-future-of-banking-with-next-gen-core-banking-solutions/">Next-generation core banking</a> platform breaks down all the barriers that legacy systems impose. They accelerate digital transformation using modern, scalable, and open architectures and lightweight codes. Leveraging APIs and advanced technologies like machine learning, core platforms deliver simplicity, cost efficiency, speed, interoperability, flexibility, security, and future readiness.<h3 class="heading-node" id="c3fg1qz8n" style="text-align: left">Benefits of Next-gen Core Banking Systems</h3><ul class="list-node" id="zkhhkcwra"><li>Simplicity in scaling up</li><li>Agility to accelerate new product launches</li><li>Incredible go-to-market speed</li><li>Onboarding and setting up happen in a few clicks</li><li>Advanced security systems for data storage and fraud prevention</li><li>Centralized access to account aggregators, mobile and third-party applications</li></ul><h2 class="heading-node" id="31" style="text-align: left">Turing Core Banking System (CBS)</h2>Turing Core Banking System (CBS) is a next-gen platform that focuses on customer experience, operational excellence, and security well within the regulatory framework. It is built on the latest micro-services architecture with low code and an <a class="link" href="https://m2pfintech.com/blog/api-the-power-that-drives-new-age-banking-ecosystems/">API</a>-first, cloud-agnostic platform making it a modern and futuristic core banking system.<h3 class="heading-node" id="lb5majzyt" style="text-align: left">Unique Features of Turing</h3><ul class="list-node" id="mlvnqk619"><li>Incredible Speed of innovation (using <a class="link" href="https://m2pfintech.com/blog/how-is-ai-changing-the-financial-industry-top-6-use-cases-in-fintech-and-banking/">AI and ML</a>)</li><li>Flexibility (low code capabilities)</li><li>Agility (hyper-personalized products)</li><li>Pre-integrated with Fraud Risk Management (FRM) engine</li></ul>Furthermore, the primary vantage point of 4th Generation CBS is its ability to evolve and adapt to emerging trends in the financial industry.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/09/Whats-new-in-core-banking.webp" alt="M2P Fintech" title="" width="100%" height="253"><h3 class="heading-node" id="ee2asr4hj" style="text-align: left">Open Banking and APIs&nbsp;&nbsp;</h3><a class="link" href="https://m2pfintech.com/blog/open-banking-a-primer-2/">Open banking</a> and the utilization of APIs are key drivers in the next generation of core banking platforms. APIs empower financial institutions to seamlessly integrate with third-party banking solutions, enhancing their service offerings and expanding their reach within the digital ecosystem. This synergy facilitates innovation and the creation of a comprehensive banking experience.&nbsp;<h3 class="heading-node" id="ezrisfcla" style="text-align: left">AI and Machine Learning&nbsp;</h3>The integration of artificial intelligence (AI) and machine learning revolutionizes core banking software. These technologies provide predictive analytics, bolster fraud detection, and deliver personalized customer experiences. Harnessing the insights from vast data pools, AI and machine learning empower banks to make informed decisions, streamline operations, and foster heightened customer satisfaction.&nbsp;<h3 class="heading-node" id="z6cl9klc2" style="text-align: left">Enhanced Security Protocols&nbsp;</h3>As digital transactions become more common, security remains paramount. Multi-layered security protocols, including biometric authentication, two-factor authentication, and end-to-end encryption, are being woven into the fabric of core banking systems. These measures are crucial in safeguarding sensitive customer data and maintaining trust in an increasingly digital landscape.&nbsp;<h3 class="heading-node" id="muek4aumh" style="text-align: left">User-Centric Design&nbsp;&nbsp;</h3>Modern core banking software centers on user-centric design principles. Intuitive interfaces, personalized dashboards, and mobile responsiveness are integrated to ensure that both bank employees and customers enjoy a seamless and intuitive banking experience.&nbsp;<h3 class="heading-node" id="ivow0e1u7" style="text-align: left">Sustainable Banking&nbsp;</h3>The evolution of core banking goes beyond technological advancements and encompasses sustainability, embracing the principles of <a class="link" href="https://m2pfintech.com/blog/climate-fintech-fintechs-leading-the-green-tech/">green fintech</a>. Core solutions align with global concerns about climate change and social responsibility by integrating features that facilitate green investments and enable carbon footprint tracking.&nbsp;<h3 class="heading-node" id="i4q9dhpvd" style="text-align: left">Integrating Decentralized Finance (DeFi)</h3>Blockchain technology and cryptocurrencies are reshaping the financial system. Some core banking software is now incorporating DeFi integrations, enabling banks to offer services related to crypto trading, lending, and borrowing.&nbsp;<h3 class="heading-node" id="x6n64jqoo" style="text-align: left">Chatbot Interfaces&nbsp;</h3>Voice assistants and chatbots are being integrated into banking systems to provide instant customer support and assist with transactions. Customers can perform banking tasks using natural language, simplifying interactions, and reducing the need for manual assistance.&nbsp;<h2 class="heading-node" id="51" style="text-align: left">Final Word</h2>The future of banking is driven by digital innovation, connectivity, and a steadfast focus on customers. Modernizing the core is no longer a choice, it is a dire requirement for banks to grow with agility, efficiency, and customer-centricity.&nbsp;Want to know more about modernizing your core banking system?Write to us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a> for insightful fintech bytes curated for curious minds like you.

Future of Core Banking Systems

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/MicrosoftTeams-image-11-1.webp" alt="M2P Fintech" title="" id="kkcc1k5hr" width="100%" height="317">Video KYC is a game changer in digital onboarding. Since 2020, video-based identity verification has been effective in preventing fraud, reducing onboarding costs, and speeding up the authentication process.&nbsp;&nbsp;A robust face liveness detection is a key part of the <a class="link" href="https://m2pfintech.com/blog/transform-digital-onboarding-with-vkyc/" target="_blank" rel="noopener">VKYC</a> process. It is basically a selfie-based check that scans the user’s facial expressions and blinking gestures to differentiate a real user from a fake impersonator or a bot.&nbsp;<h2 class="heading-node" id="m7mrkrgp6" style="text-align: justify">How can you Create a Robust Face Liveness Detection Application?&nbsp;</h2>There are several tools and technologies available in the market, but the simplest cost-effective method involves using Flutter and Google ML Kit. Using these, you can easily create a face liveness detection application.&nbsp;Wonder how? &nbsp;We have our Flutter experts <a class="link" href="https://www.linkedin.com/in/chinnadurai-viswanathan-b2b6b7a5/" target="_blank" rel="noopener">Chinnadurai Viswanathan</a> and&nbsp;<a class="link" href="https://www.linkedin.com/in/nandhakumar-k-14828813a/" target="_blank" rel="noopener">Nandhakumar Krishnan </a>explain how a face liveness detection application can be created using Google ML Kit. &nbsp;So, here you go. &nbsp;To start with, facial&nbsp;images will be detected by doing the following gestures.<ol class="list-node" id="kg1t9mjv2"><li>Left - Turn&nbsp;</li><li>Right - Turn&nbsp;</li><li>Look - UP&nbsp;</li><li>Look - Down&nbsp;</li><li>Wink 😉&nbsp;</li><li>Smile 😃&nbsp;</li></ol>We will use Google’s library named <a class="link" href="https://firebase.google.com/docs/ml-kit" target="_blank" rel="noopener">Firebase ML Kit</a> to detect the faces within an image. <a class="link" href="https://pub.dev/packages/camera" target="_blank" rel="noopener">CameraPreview</a> is used to capture the user’s image, and then it will be sent to the <a class="link" href="https://firebase.google.com/docs/ml-kit" target="_blank" rel="noopener">Firebase ML Kit</a> library, which provides the face values.&nbsp; &nbsp;Now, let’s explore the Firebase ML Kit further.&nbsp;<h2 class="heading-node" id="ecwzez33o" style="text-align: justify">Firebase ML (<a class="link Hyperlink SCXW22502046 BCX0" href="https://firebase.google.com/docs/ml-kit" target="_blank" rel="noreferrer noopener">Firebase ML Kit</a>):&nbsp;</h2>Firebase ML Kit’s Face Detection API is a powerful tool to&nbsp;detect faces within images, which allows you to identify important facial features and obtain the contours of detected faces.&nbsp;&nbsp;This technology performs exceptionally well in the pre-processing phase of the image and detects different zones of the face accurately. The API can also identify many facial expressions and emotions, making it a valuable tool for developers looking to create facial recognition with greater accuracy and precision.&nbsp;&nbsp;After the images are captured from <a class="link" href="https://pub.dev/packages/camera" target="_blank" rel="noopener">CameraPreview</a>, it is tested using the following dependencies.&nbsp;<ol class="list-node" id="7f90uhnxd"><li><a class="link" href="https://pub.dev/packages/google_ml_kit" target="_blank" rel="noopener">Google MLKit (google_mlkit)</a>&nbsp;</li><li><a class="link" href="https://pub.dev/packages/camera" target="_blank" rel="noopener">Camera (camera)</a>&nbsp;</li></ol><h2 class="heading-node" id="pv2dvk5be" style="text-align: justify">Flutter Dependencies&nbsp;</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/1.webp" alt="M2P Fintech" title="" width="100%" height="120"><h2 class="heading-node" id="d7sjvjvno" style="text-align: justify">Android Dependencies&nbsp;</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/2.webp" alt="M2P Fintech" title="" width="100%" height="91"><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/3.webp" alt="M2P Fintech" title="" width="100%" height="117"><h2 class="heading-node" id="i0796e05v" style="text-align: justify">How to Get Face Values using Flutter &amp; Android dependencies?</h2>The following steps will help you get face values using Flutter and Android dependencies.&nbsp;Step 1The first step is to set the preview of the camera in Flutter.&nbsp;&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/4.webp" alt="M2P Fintech" title="" width="100%" height="120">In Flutter, the camera controller needs 3 parameters.&nbsp;<ol class="list-node" id="aj57jbroc"><li>List of cameras (List&lt;CameraDescription&gt; cameras = [];)&nbsp;</li><li>Resolution of Photo&nbsp;</li><li>Audio needs — Based on your requirement&nbsp;</li></ol><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/5.webp" alt="M2P Fintech" title="" width="100%" height="189">Using StreamBuilder, we can get the photo from the camera every second to process the images.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/6.webp" alt="M2P Fintech" title="" width="100%" height="104">The cameraController?.startImageStream() method returns a ‘CameraImage’ which can be used for ML image processing. If you use Firebase ML for Flutter, you can directly pass the CameraImage to it for processing. Once the processing is complete, you can return the result and display it in a User Interface (UI).&nbsp;&nbsp;Note: The ‘cameraController?.startImageStream()’ method provides ‘CameraImage’ instance, but Google ML Kit requires an ‘InputImage’ object to perform face detection. Therefore, we need to convert the ‘CameraImage’ to an ‘InputImage’ object to build the face detection logic. In case you’re not familiar with ‘InputImage’, it is an ML Kit class that offers a common representation of images used as input data for machine learning models. It can be created from various sources such as bitmap, media image, or Byte Buffer.&nbsp;&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/7.webp" alt="M2P Fintech" title="" width="100%" height="74">Step 2Once you have implemented the above code, you can design your camera view in your application.&nbsp;&nbsp;Note: The below onImage method code is our special requirement, so we’ve implemented a few things.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/8.webp" alt="M2P Fintech" title="" width="100%" height="454">Now we have obtained the InputImage from the camera stream, then the next step is to process the image and detect faces using the FaceDetector from the google_mlkit_commons library. This will display a list of all the faces present in the image, that can be used for further processing.&nbsp;&nbsp;Step 3Using this faceDetector instance, we will get the list of faces from InputImages objects.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/9.webp" alt="M2P Fintech" title="" width="100%" height="368">The output of the image will be as below.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/03/MicrosoftTeams-image-9.webp" alt="M2P Fintech" title="" width="100%" height="254">If you are interested in reusing the above codes in your existing native applications, you can refer to this article on <a class="link" href="https://m2pfintech.com/blog/the-implications-of-flutter-in-fintech/" target="_blank" rel="noopener">The Implications of Flutter in Fintech</a>.&nbsp; With the power of ML and Flutter, the possibilities are endless for creating intelligent apps that offer a better user experience.&nbsp;&nbsp;If you want to know more about how we implement face liveness detection in Flutter and Google ML Kit, write to us at <a class="link" href="mailto:business@m2pfintech.com" target="_blank" rel="noopener">business@m2pfintech.com</a>!&nbsp;This article is authored by <a class="link" href="https://www.linkedin.com/in/chinnadurai-viswanathan-b2b6b7a5/" target="_blank" rel="noopener">Chinnadurai Viswanathan</a>.<a class="link" href="https://m2pfintech.com/newsletter/" target="_blank" rel="noopener">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/" target="_blank" rel="noopener">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech" target="_blank" rel="noopener">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Unmask Face Liveness Detection by Integrating Google ML Kit into your Flutter App

Central Bank Digital Currency (CBDC) 101- A Primer

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/01/AUA-2.webp" alt="M2P Fintech" title="" id="qrx9wqz1i" width="100%" height="60">Identity fraud is on the rise globally. To avert the dangers of this risk, businesses across industries need to be vigilant and conduct thorough identity verification, with no scope for errors or misrepresentation. If the identities of people involved viz., employees, customers, vendors, and other stakeholders, are not verified properly, businesses could suffer from security breaches, financial losses, regulatory penalties, and reputational damage. In India, Aadhaar serves as a trusted tool to weed out duplicate and fake identities.&nbsp; The Aadhaar card is a unique and potent document that enables cost-effective, smooth, and secure onboarding. But accessing and verifying the validity of Aadhaar cards from the UIDAI (Unique Identification Authority of India) server is not an easy task. Their security policies and other stringent protocols limit access to the UIDAI database. This is where AUA/KUA comes in as a robust and foolproof solution for accessing the Aadhaar database effortlessly and verifying identities swiftly. So, what is AUA and KUA?&nbsp; Let us break it down for you.<h1 class="heading-node" id="xckr8aasp" style="text-align: justify">What is AUA?</h1>Acronym for Authentication User Agency, AUA is a license given to a regulated entity authorized by UIDAI. The license enables businesses to use OTP and biometric-based Aadhaar authentication to verify the identities of the customer, employee, or any stakeholder. The verification response is not too elaborate. Only a ‘Yes’ or ‘No’ response is documented. The AUA license is versatile enough to benefit government institutions that disburse benefits and financial institutes that onboard customers or employees. It is important to note that AUAs are liable for the authentication process and the security and integrity of Aadhaar data.<h2 class="heading-node" id="5fvsbrq9w" style="text-align: justify">How AUA helps verify identity?</h2>When an authentication request is raised, AUA passes the request to the Authentication Server Agency (ASA) who then passes the request to the CIDR database of UIDAI. The OTP/biometric data provided by AUA is matched here on a real-time basis. The response (Yes / No) is pushed back to AUA from UIDAI via the ASA. To verify an identity, AUAs liaise with multiple Authentication Services Agencies (ASAs), which are entities that maintain secure leased line access with the UIDAI database.<h3 class="heading-node" id="bvp0bkfrz" style="text-align: justify">AUA and Sub AUA</h3>Sometimes the AUA sends authentication requests from other entities named "Sub AUAs," which is responsible for offering authentication services to customers on behalf of the AUA. The UIDAI directly authorizes the AUAs to use the Aadhaar system, while an AUA authorizes sub-AUAs to perform the authentication using the AUA route by sub-licensing it to Sub-AUA. The Sub-AUA will not have to maintain the entire infrastructure and compliance as per UIDAI compliance. AUA will handle those. Following the Aadhaar authentication, KYC authentication of customers is performed using KUA.<h2 class="heading-node" id="srsgv4yra" style="text-align: justify">What is KUA?</h2>Acronym for KYC User Agency, the KUA fetches the KYC details from the UIDAI server. The KYC checks are carried out in the UIDAI server by collecting Aadhaar Number and OTP / Biometrics (Fingerprint / Iris / Face). The response will contain data of customers viz., name, gender, date of birth, address, and photograph. The KYC request is sent from KUA through (KYC Services Agency) KSA to UIDAI. Businesses across industries must acquire an AUA/KUA license to upgrade their onboarding capabilities. The license ensures an additional layer of protection against fraud. Today, NBFCs are also eligible to apply for AUA/KUA licenses alongside RBI, SEBI, IRDA, and government-regulated businesses.<h2 class="heading-node" id="dk7jf1vai" style="text-align: justify">Why do businesses need AUA/KUA?</h2>AUA/KUA license assures speed, accuracy, and security of identity verification and KYC checks.&nbsp;Here are a few more reasons why your business requires AUA/KUA license.<ul class="list-node" id="gaoxflike"><li>Cuts costs associated with the manual, in-person document verification</li><li>Enables streamlined verification procedures</li><li>Ensures onboarding experience is smooth and seamless</li><li>Protects data using cutting-edge security</li><li>Reduces the danger of identity fraud and other security breaches</li><li>Boosts customer/employee trust, as identity verification and data are safe</li><li>Simplifies and eases user journey as the verification happens in an instant</li></ul><h2 class="heading-node" id="m27a66omw" style="text-align: justify">Challenges in acquiring AUA/KUA license</h2>As we already discussed above, acquiring the AUA/KUA license is not a walk in the park. It is fraught with a lot of challenges that make it a tedious process. Let’s delve into two important challenges here. Regulatory compliance: All businesses must adhere to stringent standards and regulations established by UIDAI to procure the AUA/KUA license. If compliance is compromised, businesses will have to deal with exorbitant fines, legal action, and reputational damage. Infrastructure and cost: Setting up and maintaining the necessary infrastructure and staff to get the AUA/KUA license can be expensive, labor-intensive, and time-consuming. To overcome the challenges in acquiring an AUA/KUA license, you need a <a class="link" href="https://syntizen.com/zen-aua">reliable RegTech partner</a> who can do the heavy lifting, while you focus on your core business. Here are some of the use cases of AUA/KUA.<h2 class="heading-node" id="wciutrwxx" style="text-align: justify">Use cases for AUA/KUA</h2><h3 class="heading-node" id="mgh56n2dr" style="text-align: justify">Streamline Customer Onboarding - BFSI</h3>AUA/KUA helps BFSI players with secure and reliable customer onboarding and KYC process using biometric authentication. The service enables quick execution of KYC processes, reduces the risk of data breach and unauthorized access to sensitive data.<h3 class="heading-node" id="zoldaec1c" style="text-align: justify">Pension Disbursal - Governments</h3>Governmental departments and agencies rely on AUA/KUA services for secure and seamless Aadhaar validation to verify identity and pension eligibility. The process of delivering financial support to senior citizens and disabled beneficiaries is made efficient, secure, and reliable.<h3 class="heading-node" id="nppzy95p3" style="text-align: justify">Online Services - Transport Department</h3>By using AUA/KUA services, government departments like the Transport Department of Telangana have been able to verify the identity of citizens efficiently and deliver online services seamlessly.&nbsp; The need to physically visit the Regional Transport Authority (RTA) offices for services was drastically reduced, making the process highly convenient and efficient for citizens.<h3 class="heading-node" id="esq88bs9h" style="text-align: justify">Contract Employee Authentication - Municipal Corporation</h3>AUA/KUA helps municipal corporations in tracking the attendance of sanitary workers accurately. Using biometric scanners, municipal corporations verify Aadhaar, at least three times in a day to prevent fraud and eliminate ghost workers. Biometric verification ensures the authenticity of workers and the accuracy of records. Municipal corporations deploy AUA/KUA services to maintain trustworthy records.<h3 class="heading-node" id="2z6yrlltv" style="text-align: justify">Employee Identification - Hospitals</h3>Hospitals leverage AUA/KUA services for hassle-free biometric verification of doctors and other healthcare professionals.&nbsp; The process helps hospital administration confirm the validity and availability of physicians and monitor their schedules.<h3 class="heading-node" id="4o77s744u" style="text-align: justify">Student Monitoring - Welfare Hostels</h3>The usage of AUA/KUA services and the installation of biometric scanner devices in welfare hostels have reduced incidences of ghost student records and increased efficiency in fund allocation and utilization. By helping hostel students authenticate themselves every day, the hostels can track their attendance precisely and get rid of ghost student records. The process has helped the administration prevent the misappropriation of funds and ensure resources are used efficiently to support the students.<h3 class="heading-node" id="z2jovtjh0" style="text-align: justify">Scholarship Monitoring - Universities/Colleges</h3>Tracking student attendance is imperative for colleges and universities. To prevent fraudulent activities or misrepresentations in biometrics, institutions can rely on AUA/KUA. It helps verify student identity quickly and accurately using the Aadhaar number. It also helps universities to disburse scholarships to students.<h2 class="heading-node" id="4hrtq082o" style="text-align: justify">AUA/KUA, a necessity for seamless identity verification</h2>AUA/KUA license is a vital investment for any business that requires seamless identity verification. Instead of taking on the complex and expensive task of implementing an in-house identity service, businesses can consider partnering with a reputable digital identity service provider that offers a comprehensive AUA/KUA solution to combat identity fraud. Check out our exclusive AUA/KUA suite that offers the following features.<ul class="list-node" id="mfwgkl508"><li>Cloud and on-premise hosting</li><li>Face authentication-based transactions</li><li>Scalable system (handles 10 million hits/day)</li><li>Live network operations team</li><li>Supports all stacks (Web, Windows &amp; Android)<ul class="list-node" id="pmn5y19a1"><li>UIDAI-approved biometric scanners</li><li>Fraud monitoring systems</li></ul></li><li>Multiple ASA switch (switch transactions to ASA)</li><li>Live dashboard monitoring</li><li>Assured UID compliance</li></ul>Want to know more about our AUA/KUA suite? Write to us at <a class="link" href="mailto:business@m2pfintech.com.&nbsp;">business@m2pfintech.com.&nbsp;</a> &nbsp; &nbsp;<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/" target="_blank" rel="noopener">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech" target="_blank" rel="noopener">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Product

About

Compliance

Resources