LogoLogo
PlatformUse CasesCommunityBlog
1.2
1.2
  • 🏠Home
  • 🍩PLATFORM
    • Architecture
    • Modules
      • Program & Beneficiary Management System
        • Program Management
        • Program Disbursement Cycles
        • Beneficiary Management
        • ID Verification
        • Beneficiary Registry
        • Eligibility
          • Proxy Means Test
        • Deduplication
        • Enrolment
        • Entitlement
        • Disbursement
          • In-kind Transfer
          • Digital Cash Transfer
          • Voucher
        • Self Service Portal
        • Document Management
        • Multi-tenancy
        • Notifications
        • Accounting
        • Administration
          • Multi-tenancy
          • RBAC
          • i18n
      • Social Registry
      • Registration Tool Kit
        • ODK Collection App
      • SPAR
      • G2P Cash Transfer Bridge
        • File-based Payment Backend
      • 4Sure Verifier
    • Monitoring and Reporting
    • Logging
    • Privacy and Security
      • Key Manager
      • Key Manager Architecture
    • Interoperability
    • Integrations
      • OpenG2P eSignet Integration
      • OpenG2P M-Pesa Integration
      • OpenG2P Mojaloop Integration
    • Technology Stack
    • Reference
      • ↔️API
    • Releases
      • 1.1.0
        • Release Notes
    • License
      • OpenG2P Support Policy
    • FAQ
  • ⛎USE CASES
    • Use Cases
      • Immediate Assistance On Demand
      • Registration using Self Service Portal
      • Registration in Low Connectivity Areas
      • Service Provider Reimbursement
  • 🗄️DEPLOYMENT
    • Deployment Architecture
    • Infrastructure Setup
      • Hardware Requirements
      • Wireguard Server Setup
      • Rancher Setup
      • NFS Server Setup
      • OpenG2P K8s Cluster Setup
      • Loadbalancer Setup
    • External Components Setup
      • PostgreSQL Server Deployment
      • Keycloak Deployment
      • Minio Deployment
      • ODK Central Deployment
      • Kafka Deployment
      • Logging & OpenSearch Deployment
      • Keymanager Deployment
      • eSignet Deployment
    • OpenG2P Modules Deployment
      • PBMS Deployment
        • Post Install Configuration
      • Social Registry Deployment
      • GCTB Deployment
      • SPAR Deployment
        • SPAR Post Installation Configuration
      • Reporting Deployment
    • Deployment Guides
      • Giving Access to Users
      • Packaging OpenG2P Docker
      • SSL Certificates using Letsencrypt
      • Install WireGuard Client on Desktop/Laptop
      • Install WireGuard Client on Android Device
      • Make Environment Publicly Accessible using AWS LB Configuration
  • 👨‍💻DEVELOPER ZONE
    • Getting Started
      • Installing OpenG2P On Linux
    • Repositories
      • openg2p-mts
        • MTS Connector
        • OpenG2P Registry MTS Connector
      • openg2p-documents
      • openg2p-formio
        • G2P Formio
      • openg2p-registry
        • G2P Registry: Rest API Extension Demo
        • G2P Registry: Additional Info REST API
        • G2P Registry: Bank Details Rest API
        • G2P Registry: Additional Info
        • G2P Registry:Bank Details
        • G2P Registry:Membership
        • G2P Registry: Group
        • G2P Registry: Individual
        • G2P Registry: Base
        • G2P Registry: Rest API
      • openg2p-program
        • OpenG2P Program Payments: In Files
        • OpenG2P Program: Documents
        • OpenG2P Program Payment (Payment Hub EE)
        • G2P Programs: REST API
        • G2P Program : Program Registrant Info Rest API
        • OpenG2P Entitlement: Differential
        • G2P Program Payment Manager: Payment Interoperability Layer
        • G2P Program Approval
        • OpenG2P Entitlement Voucher
        • OpenG2P Program Assessment
        • OpenG2P Program Reimbursement
        • OpenG2P Program Registrant Info
        • OpenG2P Program Payment Cash
        • OpenG2P Program Payment Simple Mpesa Payment Manager
        • OpenG2P Programs Cycleless
        • OpenG2P Programs Autoenrol
        • OpenG2P Entitlement In-kind
        • G2P SelfServicePortal
        • OpenG2P Program Payment: G2P Connect Payment Manager
        • G2P Notifications: Wiserv SMS Service Provider
        • G2P: Proxy Means Test
      • openg2p-testing
      • openg2p-fastapi-template
      • openg2p-fastapi-common
        • OpenG2P FastAPI Common
        • OpenG2P FastAPI Auth
        • OpenG2P Common: G2P Connect ID Mapper
      • social-payments-account-registry
      • g2p-cash-transfer-bridge
      • openg2p-deployment
      • openg2p-documentation
      • openg2p-helm
      • openg2p-theme
      • openg2p-portal-api
      • openg2p-mosip
      • openg2p-notifications
      • openg2p-packaging
      • openg2p-importers
        • G2P ODK Importer
      • openg2p-documents
      • openg2p-reporting
      • openg2p-self-service-portal
      • openg2p-portal
      • odoo-json-field
      • spar-ui
      • openg2p-auth
      • openg2p-voucher-scanner-app
      • openg2p-security
      • openg2p-mts
      • server-auth
      • openg2p-data
      • openg2p-esignet
      • spar-load-test
      • 4sure
    • Testing
      • Test Workflow
      • Automation Framework
  • 👩‍💻COMMUNITY
    • Contributing
    • Code of Conduct
  • 📔USER GUIDES
    • Platform Guides
      • Registration
        • Self Register Online
        • ODK
          • Create a Project for a Program
          • Create a Form
          • Upload a Form
          • Upload revised Form
          • Test a Form
          • Publish a Form
          • Provide Form Access to Field Agent
          • Download Form on ODK Collect
          • Delete a Form
          • Register Offline
        • ODK Importer
          • Customize the ODK Importer Configuration based on the ODK Form Fields
      • Authentication
        • Integrate with MOSIP e-Signet
      • Deduplication
        • Deduplicate Registrants
      • Eligibility and Program Enrollment
        • Enrol Registrants into Program
        • Program
          • Create Manager Type
            • Create Eligibility Manager Types
              • Create Default Eligibility Manager
              • Create ID Document Eligibility Manager
              • Create Phone Number Eligibility Manager
            • Create Deduplication Manager Types
              • Create ID Deduplication Manager
              • Create Phone Number Deduplication
            • Create Notification Manager Types
              • Create SMS Notification Manager
              • Create Email Notification Manager
              • Create Fast2SMS Notification Manager
            • Create Entitlement Manager Type
              • Create Default Entitlement Manager
              • Create Voucher Entitlement Manager
            • Create Payment Manager Types
              • Create Payment Hub EE Payment Manager
              • Create Payment Interoperability Layer Payment Manager
              • Create Default Payment Manager
              • Create Cash Payment Manager
              • Create File Payment Manager
          • Create Program
          • Map Self-Service Portal Form
          • Create Eligibility Manager under Program
          • Create Deduplication Manager under Program
          • Create Notification Manager under Program
          • Configure Program Manager under Program
          • Create Entitlement Voucher Template
        • Configuration
          • Configure Proxy Means Test
          • Configure ID Types
          • Configure Entitlement Manager under Program
          • Configure Payment Manager in Program
        • Approval
          • Create and Approve Program Cycle
          • Multi-Stage Approval
        • MTS Connector
          • Create MTS Connector
            • Create ODK MTS Connector
            • Create OpenG2P Registry MTS Connector
        • Settings
          • Create User and Assign Role
        • Website
          • Create Self-Service Portal Form
      • Notification
        • Send Notifications to Individual Registrants
        • Prepare and Send Payment
      • Entitlement
        • Install SmartScanner App
      • Cash Transfer
        • Reimbursement
          • Submit Reimbursement Using the Service Provider Portal
          • Reimburse the service provider
      • Accounting and Reporting
      • SPAR
        • Self Update ID with Financial Address information
        • Admin Guide to Link ID with Financial Address information
      • 4Sure
        • Verify Digital Credentials using 4Sure
        • Verify and Populate the form in ODK Collect using 4Sure
    • Documentation Guides
      • Documentation Guidelines
      • OpenG2P Module Doc Template
  • BLOG
    • Articles
      • OpenG2P and SDG Goals
      • OpenG2P - A Building Block for DPI
    • Case Studies
Powered by GitBook
LogoLogo

Copyright © 2024 OpenG2P. This work is licensed under Creative Commons Attribution International LicenseCC-BY-4.0 unless otherwise noted.

On this page
  • Introduction
  • Operational Modes
  • Functionality and features
  • Concepts - all entities/sub modules
  • Components
  • BLE Verifier SDK
  • Camera SDK
  • Face Match SDK
  • Technical Concepts
  • Workflow
  • User guides
  • Source Code
  1. PLATFORM
  2. Modules

4Sure Verifier

Introduction

The 4Sure App is a user-friendly tool designed to make verifying identities quick and easy, even without an internet connection. It's perfect for situations where you need to confirm someone's credentials securely and reliably. By using technology similar to what's found in everyday devices, the app allows for a straightforward transfer of necessary information from a secure digital wallet, ensuring that the verification process is smooth and efficient. With its face verification feature, the app allows agents to take a person's photo and compare it with the image on their credential, ensuring accurate identity confirmation. Whether you're in a remote area or need to check identities in a busy environment, the 4Sure App ensures a smooth and secure verification process.

The 4Sure application is a VC (Verification Certificate) application designed to authenticate individuals by comparing and matching their VC details, such as national ID and beneficiary ID. The 4Sure application is seamlessly integrated with the MOSIP Platform, enhancing its functionality and usability. The application is designed to facilitate various features like facial authentication, identity verification, and offline authentication.

The application features a user-friendly interface that guides agents through the authentication process step-by-step. It provides clear instructions for scanning and capturing live photos and displays the scanned certificates once they are shared by beneficiaries.

Operational Modes

Standalone Mode

In standalone mode, the app functions independently to verify an individual's identity or confirm their eligibility for a specific program. It does not require an internet connection, making it ideal for use in remote or offline environments. In this mode, the app ensures data privacy and security by not storing any personal information post-verification, aligning with best practices in data protection.

Key Features:

  • Identity verification

  • Eligibility confirmation for programs

  • Offline operation

  • No storage of personal data

Use Cases:

  • Verifying identities in remote locations

  • Checking eligibility for benefits or services in offline settings

Intent Mode

When the app is activated through intent, such as being opened via another application (e.g., ODK Collect), it operates in a connected manner, allowing for the exchange of information between the 4Sure App and the calling application. This mode is particularly useful for applications that require a seamless flow of data and wish to incorporate identity verification within their operational processes.

Key Features:

  • Data exchange with calling applications

  • Seamless integration with other apps

  • Enhanced functionality for interconnected operations

Use Cases:

  • Gathering and returning verification details to a primary application

  • Enhancing data flow in applications that require embedded verification processes

The dual-mode functionality of the 4Sure App provides versatile solutions catering to various operational needs and environments, ensuring users have access to reliable and secure verification services regardless of their internet connectivity status.

Functionality and features

Feature
Functionality

Secure transfer of credentials

Utilizes BLE technology for the secure and encrypted transfer of digital credentials

MOSIP integration

Fully integrated with the MOSIP platform, ensuring compatibility and interoperability with a wide range of identity solutions

User-friendly interface

Designed with a focus on ease of use, ensuring accessibility for users of varying technical proficiencies

Face verification

Incorporates a robust face verification SDK to enhance identity authentication, adding an extra layer of security and trustworthiness to

the verification process

Authentication Process

The 4Sure application uses a two-step authentication process to verify individuals. First, the national ID of the individual is scanned and then authenticated by capturing it with a live photo. And then, the beneficiary ID is scanned or entered to complete the authentication process.

VC Matching

The application compares the national ID and beneficiary ID provided by the individual to ensure they match. This matching process is done by verifying the UIN which helps to authenticate the individual's identity and verify their VC details.

Offline Authentication

One of the key features of the 4Sure application is its ability to perform authentication processes offline. This ensures that users can verify their identity even in areas where there is no connectivity.

Integration

The 4Sure application can be integrated with other systems or applications to enhance its functionality. For example, it can be integrated with ODK to collect the authenticated data of the beneficiaries, Such as the national ID and beneficiary ID data are passed to ODK central and from there moved to the social registry and programs.

Facial Authentication

The application provides facial recognition technology to authenticate individuals, providing a secure and efficient method for verifying identity. Users can simply capture a live photo, which is then compared against the images present on the national ID.

Identity Verification

With MOSIP integration, the application enables comprehensive identity verification processes. Users can scan and upload IDs such as National ID and Beneficiary ID, which are verified against each other for accuracy and validity.

Security Features

The 4Sure application includes security features to protect the authenticity of the verification process. These features may include encryption of VC details, secure storage of verification certificates, and secure transmission of data.

Concepts - all entities/sub modules

National ID: The national ID, also known as a national identification ID card, is a unique identifier assigned to individuals by their government for the purpose of identification. It can be used for availing various facilities. The format and use of national IDs may vary from country to country.

Beneficiary ID: A beneficiary ID is a unique identifier assigned to a person or entity who is the recipient of benefits, funds, or assets from a particular program. Even a Beneficiary ID is a unique identifier assigned to individuals. The format and use of national IDs may vary from country to country.

Authentication: Authentication is the process of verifying the identity of a user. In the 4Sure application, the authentication of the beneficiary is done by capturing the live photo of the beneficiary and then comparing it with the photo present on the National ID. The verified ID is then marked as authenticated.

Components

The 4Sure App is built with several key technical components that enable its functionality, especially in terms of offline data transfer and identity verification. These components are integral to the app's operation, ensuring it delivers a secure and efficient verification process.

BLE Verifier SDK

The BLE Verifier SDK is a critical component that enables the 4Sure App to receive Verifiable Credentials (VCs) via Bluetooth Low Energy (BLE) technology. This SDK is a wrapper built on top of Tuvali, a React Native library, which simplifies the API and enhances the app's ability to facilitate offline VC transfers between mobile devices.

Key Features:

  • Secure VC transfer via BLE.

  • Simplified API for ease of integration.

  • Dependency on Tuvali for core functionality.

  • Active development and maintenance by MOSIP.

Considerations:

  • Limited support for iOS devices in initiating BLE exchanges, affecting VC transfer between iOS devices.

Camera SDK

The Camera SDK integrates with the react-native-camera-kit camera to enable the app to access and use the device's camera. This feature is crucial for capturing live photos of individuals during the verification process.

Key Features:

  • Access and control over the device's camera.

  • Integration with react-native-vision for enhanced camera functionality.

Use Cases:

  • Capturing live photos for real-time identity verification.

Face Match SDK

The Face Match SDK is a sophisticated component that leverages Tensorflow and Google ML Kit to perform facial recognition and verification. It is built with native functionalities for Android ensuring compatibility and reliable performance.

Key Features:

  • Advanced facial recognition using Tensorflow and Google ML Kit.

  • Utilizes a tflite model trained on faces

  • Essential for offline face authentication, providing an additional layer of security.

Considerations:

  • The tflite model requires creation and training by the integrating party, demanding specific technical expertise.

Technical Concepts

Workflow

User guides

TODO

Source Code

PreviousFile-based Payment BackendNextMonitoring and Reporting

Last updated 1 year ago

4Sure Source Code -

🍩
See technical documentation of 4Sure
https://github.com/OpenG2P/4sure