User identity authentication has changed with the times
From passwords, dynamic tokens, USB keys, and SMS verification codes,
To biometric data, such as fingerprints and facial recognition.
Optimal authentication must account for a myriad of factors
Including basic security capabilities, convenience, respect for user privacy, and legal compliance
HUAWEI FIDO provides a comprehensive authentication solution
Taking everything into account
What Is HUAWEI FIDO?
HUAWEI Fast Identity Online (FIDO) provides biometric authentication (BioAuthn) and online identity verification (FIDO2) capabilities, empowering developers to provide users with optimally secure, reliable, and convenient password-free identity verification.
Biometric Authentication (BioAuthn)
BioAuthn supports both 3D facial and fingerprint-based authentication, and uses the system integrity check result as a prerequisite. When a user initiates biometric authentication using BioAuthn on an insecure device, BioAuthn will identify that the device is insecure, and abort biometric authentication. BioAuthn also provides a key-based mechanism for verifying the authentication result, ensuring that it is highly-reliable.
Online Identity Verification (FIDO2)
FIDO2 provides developers with Android Java APIs that are fully compliant with the FIDO2 specifications. A mobile phone can be used as a FIDO2 client or a FIDO2 authenticator (otherwise called security key). When a user signs in to your app through another app or browser, they can use the fingerprint recognition hardware as a platform authenticator to complete fingerprint-based sign-in, without entering a password. This innovative solution avoids risks associated with passwords, and other security risks, such as credential stuffing attacks. When signing in to your app, or completing a payment on a PC, the user's mobile phone can serve as a roaming authenticator, which accelerates the identity authentication process.
Service Scenarios
Secure sign-in verification
Users can sign in to the app via fingerprint or facial recognition, without needing to enter a password.
Identity theft prevention
Users can complete in-app payments via fingerprint or facial recognition, without needing to enter a payment password, or incorporate multiple layers of security, and complete payments by entering a password and having their fingerprint of face identified.
FIDO security key authentication
Users can also complete identity authentication using the available FIDO security keys, over specific authentication protocols such as USB, NFC, and Bluetooth Low Energy (BLE).
Using a Huawei phone as a FIDO2 security key
Huawei phones can serve as FIDO security keys, freeing users from needing to carry an extra FIDO security key for an additional device.
How can I Integrate HUAWEI FIDO?
For guidance during the integration process, please refer to the HUAWEI Developers website, where you will find the integration guide and other resources for reference, or you can contact us through [email protected] for further technical assistance.
* HMS Core 4.0 courses produced by HUAWEI Developers are now available on Huawei official channels, including Video Center on HUAWEI Developers and HUAWEI Developer Forum.
From ride-hailing, navigation and mobile travel
To gaming, streaming, and social media
Mobile apps have become indispensable in daily life
But increased convenience puts sensitive user data at risk
HMS Core Safety Detect offers unique protections
For comprehensive app security with little effort!
What Is Safety Detect?
Safety Detect is an open multi-dimensional security detection service offered by Huawei, that helps developers bolster app security capabilities, based on the Trusted Execution Environment (TEE) on Huawei phones, without compromising user experience.
System Integrity Check (SysIntegrity)
SysIntegrity is capable of checking whether the user device is rooted, unlocked, or escalated for higher permissions, and uses this information to help you determine how and when to restrict your app's behavior to avoid potential leaking of sensitive user information or financial information.
A unique advantage of SysIntegrity is that it is based on the TEE OS, which is built into every Huawei phone (running EMUI 9.0 or later). The TEE OS comes with Huawei's in-house microkernel, which has achieved the prestigious CC EAL 5+ certification, and is the first solution of its kind to pass formal verification. Having integrated SysIntegrity, it can isolate apps for bolstered protection, and provide independent privacy security protection services. For example, services with high security requirements, such as the payment services, are provided with the appropriate level of protection in the TEE OS.
App Security Check (AppsCheck)
When your app has integrated AppsCheck, it can obtain a list of malicious apps on the user's device, which provides a strong basis for high-level risk analysis (for risky/virus-infected apps). Users are then warned of the presence of any risks on your app, or prompted to exit your app. According to the three largest global virus evaluation agencies, AppsCheck can detect malicious apps with a staggering accuracy rate of 99%.
Malicious URL Check (URLCheck)
With URLCheck, your app can determine whether a visited URL contains phishing or malware apps. The check strikes the optimal balance between performance and timeliness, and is capable of detecting a wide range of malicious URLs, such as phishing and Trojan-infested URLs. URLCheck is easy to integrate into your app, and provides trusted, operation-free security services, reducing the costs associated with developing secure browsing services.
Fake User Detection (UserDetect)
Fake user detection is critical for app operations, as the presence of fake operations such as game bots, activity bonus hunting, and malicious spamming, can give your app a bad reputation. UserDetect can identify spoofed devices, based on the device signature and identifier, and identity relevant environmental risks, such as roots, simulators, VMs, device change tools, and anonymous IP addresses. It can also recognize fake users based on screen touch and sensor behavior, as well as prevent batch registration, credential stuffing attacks, bonus hunting, and content crawlers. These safeguards provide your app's users with unmatched peace of mind.
Many popular apps have integrated Safety Detect, such as the app for the Sputnik media outlet in Russia, APUS, a popular browser in India and Southeast Asia, and 1998 Camera in Vietnam.
How Can I Integrate HUAWEI Safety Detect?
Each of the four functions in Safety Detect has a dedicated API that is easy to integrate. For guidance during the integration process, please refer to the HUAWEI Developers website, where you will find the integration guide and other resources for reference, or you can contact us through [email protected] for further technical assistance.
* HMS Core 4.0 courses produced by HUAWEI Developers are now available on Huawei official channels, including Video Center on HUAWEI Developers and HUAWEI Developer Forum.
? Safety Detect - HMS Core Featured Courses
Huawei would like to hear from you and see what features you like in HMS. Out of all of the rich and powerful features included in HMS, leave a comment sharing your favorite. Leave a detailed comment to enter into the Huawei Mate30 Pro giveaway.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
HMS includes many different features to offer a complete solution for app developers. These are all of the solutions available in HMS, with improvements and new additions always in the works for future releases.
Account Kit
HUAWEI Account Kit provides developers with simple, secure, and quick sign-in and authorization functions. Instead of entering accounts and passwords and waiting for authorization, users can just tap the Sign In with HUAWEI ID button to quickly and securely sign in to your app.
Video
Awareness Kit
HUAWEI Awareness Kit provides your app with the ability to obtain contextual information including users' current time, location, behavior, audio device status, ambient light, weather, and nearby beacons. Your app can gain insight into a user's current situation more efficiently, making it possible to deliver a smarter, more considerate user experience.
Video
Drive Kit
HUAWEI Drive Kit ("Drive Kit") allows you to create apps that use the HUAWEI Drive Kit service. Drive Kit provides cloud storage for your apps, enabling users to store files that are created while using your apps, including photos, videos, and documents, in HUAWEI Drive ("Drive") as well as download, synchronize, share, search for, and comment on these files and reply to comments. Drive Kit also provides comprehensive data protection, empowering users to manage their data securely and conveniently.
The current core capabilities of Drive Kit include uploading, downloading, and searching for files in Drive, commenting on files, replying to comments, querying file changes, and receiving notifications.
Video
FIDO
HUAWEI FIDO provides your app with FIDO2 based on the WebAuthn standard. It provides Android Java APIs for apps and browsers, and allows users to complete authentication through roaming authenticators (USB, NFC, and Bluetooth authenticators) and platform authenticators (fingerprint and 3D face authenticator). In addition, FIDO provides your app with powerful local biometric authentication capabilities, including fingerprint authentication and 3D facial authentication. It allows your app to provide secure and easy-to-use password-free authentication for users while ensuring reliable authentication results.
Video
Game Service
With HUAWEI Game Service, you will have access to a range of development capabilities to help you develop your games more efficiently:
HUAWEI ID sign-in
Real-name authentication
Bulletins
Achievements
Events
Leaderboards
Saved games
Player statistics
Video
Health Kit
HUAWEI Health Kit is a health-related open service provided by Huawei. Developers can integrate HUAWEI Health Kit to access the Huawei Health platform and obtain fitness and health data while using the service capabilities, so as to provide consumers with health care, workout guidance, and ultimate service experience.
With the Health Kit data platform, upper-layer ecosystem apps do not need to pay attention to devices that generate data and device vendors can provide better services for users through the upper-layer ecosystem apps without the need to develop dedicated apps for their devices. HUAWEI Health Kit connects the hardware devices and ecosystem apps to provide consumers with health care, workout guidance, and ultimate service experience.
Video
Identity Kit
HUAWEI Identity Kit provides unified address management services for users and allows your app to access users' adresses conveniently upon obtaining permissions from the users.
Video
Location Kit
HUAWEI Location Kit combines the GPS, Wi-Fi, and base station locations to help you quickly obtain precise user locations, build up global positioning capabilities, and reach a wide range of users around the globe.Currently, it provides the four main capabilities: fused location, location semantics, activity identification, and geofence. You can call relevant capabilities as needed.
Video
Map Kit
HUAWEI Map Kit provides an SDK for map development. It covers map data of more than 200 countries and regions, and supports dozens of languages. With this SDK, you can easily integrate map-based functions into your apps.
Video
ML Kit
HUAWEI ML Kit allows your apps to easily leverage Huawei's long-term proven expertise in machine learning to support diverse artificial intelligence (AI) applications throughout a wide range of industries. Thanks to Huawei's technology accumulation, HUAWEI ML Kit provides diversified leading machine learning capabilities that are easy to use, helping you develop various AI apps.
Video
Nearby Service
HUAWEI Nearby Service allows apps to easily discover nearby devices and set up communication with them using technologies such as Bluetooth and Wi-Fi. The service provides Nearby Connection and Nearby Message APIs.
Video
Panorama Kit
By integrating HUAWEI Panorama Kit through the HMS Core Panorama SDK, your app can quickly present interactive viewing of 360-degree spherical or cylindrical panoramic images in simulated 3D space on Android phones, delivering an immersive experience to users.
Video
Safety Detect
Safety Detect builds robust security capabilities, including system integrity check (SysIntegrity), app security check (AppsCheck), malicious URL check (URLCheck), fake user detection (UserDetect), and malicious Wi-Fi detection (WifiDetect), into your app, effectively protecting it against security threats.
Video
Scan Kit
HUAWEI Scan Kit scans and parses all major 1D and 2D barcodes and generates QR codes, helping you quickly build barcode scanning functions into your apps.
HUAWEI Scan Kit automatically detects, magnifies, and identifies barcodes from a distance, and is also able to scan a very small barcode in the same way. HUAWEI Scan Kit works even in suboptimal situations, such as under dim lighting or when the barcode is reflective, dirty, blurry, or printed on a cylindrical surface. This leads to a higher scanning success rate, and an improved user experience.
Video
Site Kit
With HUAWEI Site Kit, your app can provide users with convenient and secure access to diverse, place-related services.
Video
WisePlay DRM
WisePlay DRM provides you with digital content copyright protection capabilities, including hardware-level and software-level DRM capabilities. This helps to support you in various use cases such as online application for client certificates, content encryption in multiple formats and algorithms, and online and offline playback.
Video
Analytics Kit
Analytics Kit offers you a range of preset analytics models so you can gain a deeper insight into your users, products, and content. With this insight, you can take a data-driven approach to market your apps and optimize your products.
Video
Dynamic Tag Manager
HUAWEI Dynamic Tag Manager (DTM) is a tag management system. With DTM, you can dynamically update tracking tags on a web-based UI to track specific events and report data to third-party analytics platforms, monitoring your marketing activity data as needed.
Video
Push Kit
HUAWEI Push Kit is a messaging service provided by Huawei for developers. It establishes a messaging channel from the cloud to devices. By integrating HUAWEI Push Kit, developers can send messages to apps on users' devices in real time. This helps developers maintain closer ties with users and increases user awareness and engagement. The following figure shows the process of sending messages from the cloud to a device.
Video
Ads Kit
HUAWEI Ads Publisher Service utilizes Huawei's vast user base and extensive data capabilities to deliver targeted, high quality ad content to users. With this service, your app will be able to generate revenues while bringing your users content which is relevant to them.
We offer a range of ad formats so you can choose the one which offers the best experience for your users. Currently, you can integrate banner, native, rewarded, interstitial and splash ads, and we'll be launching even more formats in the future.
Use the HUAWEI Ads SDK to quickly integrate HUAWEI Ads into your app. Once you've chosen an ad format, you're ready to start bringing in revenue using our high-quality advertising services.
Video
In-App Purchases
Huawei's In-App Purchases (IAP) service allows you to offer in-app purchases and facilitates in-app payment. Users can purchase a variety of virtual products, including one-time virtual products and subscriptions, directly within your app.
HUAWEI IAP provides a product management system (PMS) for managing the prices and languages of in-app products (including games) in multiple countries. You only need to release one app package to promote your app in countries and regions listed in Supported Countries and Regions.
Video
Wallet Kit
HUAWEI Wallet Kit is an open capability that integrates Huawei's full-stack "chip-device-cloud" technologies to provide easy-to-access digital passes on an integrated platform. It enables users to save their tickets, boarding passes, loyalty cards, coupons, gift cards and other cards or passes on their mobile phones for convenient, anytime use. It also facilitates interactions between apps and users via location-based notifications, real-time status updates, and NFC capabilities.
Video
Giveaway Details:
One winner will be chosen from this thread, based on the quality of their post
The prize is the Huawei Mate30 Pro
The giveaway begins on 5/8/2020 and a winner will be chosen on 5/23/2020
One entry per user
I honestly don't really know HMS so I still don't have a formed opinion about it.
no large Google **** things!!!! it is precious
I would like my device to work for me atleast a week before charging again, i dont want my device to collect any of my data without my concent, i would like a camera that can shoot raw to perfection, on the other hand a user friendly ui for the camera as well as if it shoots raw...a fullfledge software intigration for raw editing, i dont want to rely on 3rd part apps for things like ntfs support, sharing files music etc, a proper file explorer with the flexibility of supporting each and every file type, may it be an extraction frm a zip, a one stop solution for all my media. Many sorting sequences, face tracking for sorting photos inbuild, a solid sounding pair of speakers and obviously a headphone jack, but if not then a easily connective compact conncetor, which can be used for headphones as well as charing at same time, also should be included in the box, i would love water proofing and dust proofing and i have a curious idea of touchscreen, as i use a waterproof phone, i am very troubled with the capacitive touch screen when there is water on it, i would love to have some solution for it...like giving a fullscreen fingerprint reader under screen and using it as a touch locator for underwater use, i hate the idea of popup camera...but would love the idea of inscreen camera as well..and last but nit the least the network and performance...the performance should be topnotch...and aftersales service for atleast 4-5years..like updates, etc..
The amount of services here is amazing!! Good job on another note.......so many of them are made just to gleen personal information from the end user that it is downright SCARY!!!!
===> What I love?
I love your style and flare of anything your company designs and builds. Top quality with each of us in mind.
Sounds like you have a good range of kits, APIs etc, to take advantage of the hardware and support developers. Do you have a plan to detail how the device and supporting platform are securely isolated from the Chinese government, and whether that would be audited by a respected 3rd party?
I have never had Huawei phone so i cant give my opinion on HMS. The things i like about Huawei is that they are different from others and "no big brother" (read it google)
I would like to have Huawei phone to test and then to tell!
I am proud of HMS. Imagine you can see others records and compete with them with game service. And many other services. Even health, map etc. services. Imagine phone caring about your health. And there is a wallet service with easy of access, which is awesome.
Personal opinion
Hello,i use Mate 10 Pro since 2018 Mars and i really appreciate the updates that are comming in terms of HMS ecosystem. At the beginning in my mind i tought that HMS will have no life and the system will be bad , but with the time the improvements demonstrate that can make me to stay more on the HM Services. So at this moment they have a large range to ofer to users, from cloud to apps and even frendly interface. The most important thing for me is the support of witch can benefit every user around the Globe , it is really at very 1st place from all devices that i own.
For me it's all about Health Kit. Given these crazy times when we're all on lock down it's even more important than normal.
I never owned or their phones, i cant commemt
I like many of the new features in HMS including the Drive Kit,Health Kit,HUAWEI IAP, scanning and security kit and all the rest of the performance and optimization of apps without relying so much on the playstores
HMS Core FTW?
Huawei Mobile Services (HMS) Core is to be a replacement of Google’s developer libraries. Super interested in how it compares to Google's and Apple's. If all goes well, we can have a third major OS in the running.
Competition is good for the mobile market. With Google and Apple dominating, development has been somewhat stagnant and the bang-for-buck devices have been out of reach for some time. It's not just hardware, but software - Apple has been able to optimize iOS to use less than 4GB RAM!
The 5G race is here and looking forward to see how companies implement 5G speeds with everyday tasks.
It is always refreshing to see new additions in the market if mobile capabilities. These kits will bring a new set of tools to AI and all other APIs to further enhance the user experience. I expect to get to know better the Huawei mobile services cores and see what they have to offer its users.
Warm Regards,
Paul
Is this mobile can be a great value to health care professional?! I never tried
Anyway I like using my Samsung Galaxy note 8 with its pen feature...
I didn't like huawei phones! And I didn't recommended it for anyone!
I've read a lot about the latest Huawei phones, and now that I've had my own Huawei (Nexus 6P) for 4 (!) years, I'd love to jump in with all the specs and services provided
I love that it doesnt have all that google crap !
Account kit, health kit and wallet kit are the ones I like a lot as they provide security, ease of use and self care and healthier lifestyle.
I wish you keep on developing these revolutionary services. :angel:
Account kit all the way!!!!
For me, the best feautre is the account kit. I'm a developer but i'm also an user. And from personal experiences I know how those authorizations can make users reject your app. With this kind of approach we could offer a smoother experience for the user and protect his data at the same time. The ideia of just signing in(which is already well difunded among the users) can provide a faster access to the app. I'm always searching for alternatives that can make development and UX improve, this might be one of them. I'd like to highlight others features but i'm gonna stick with this one.
Facial recognition is used everywhere, such as for verifying your identity at the bank, clocking-in and –out for work, and even when entering some restricted buildings. On mobile phones, this technology allows us to unlock our phones and pay for things. And once integrated into apps, this technology facilitates easy sign-in and password change.
Behind the usefulness of facial recognition, however, lurks the risk that someone may use a fake face to trick and bypass this technology. The core concern for users of facial recognition is whether it is capable of telling whether a face is real or not.
The liveness detection service from HMS Core ML Kit overcomes this issue, and this explains why the APIs of this service have reached a great number of average daily calls and why it is well received among developers.
Following an upgrade to the liveness detection service, it will provide interactive biometric verification, aside from static biometric verification, helping improve user security and trust in facial recognition technology.
Identifying Each Fake Face Using Liveness DetectionFacial recognition is a technology that enables a machine to recognize a person's face. Most facial recognition systems, however, can simply recognize a face in an image, but cannot accurately determine whether the face is of a real person. This has sparked the need for technology that can automatically distinguish fakes faces from real ones, to prevent spoofing attacks.
Such technology can be realized using the liveness detection algorithm. It can detect such fake faces as those printed out, displayed on an electronic device, or disguised as a silicone mask or 3D portrait, to prevent fake face attacks.
This technology is widely used in finance, public affairs, and entertainment, which also makes its application challenging. For example, the expectations for liveness detection vary depending on the device, people, and environment involved, meaning that this technology needs to be constantly upgraded.
Improving User Experience with Interactive Biometric VerificationML Kit will offer the interactive biometric verification capability to strengthen the flexibility of its liveness detection service. An app with this capability can prompt a user to do either three of the following actions: blink, open their mouth, turn their head left, turn their head right, and stare at the camera. If the required action is not detected, the face will be deemed fake.
With the deep learning model and image processing technology, liveness detection is useful in many scenarios by providing prompts that indicate the lighting is too dark or bright, a mask or sunglasses are blocking the view, and the face is too near to or far from the camera. This ensures that the whole liveness detection process is efficient, secure, and user-friendly.
The liveness detection capability can help perform remote identity authentication in fields such as banking, finance, insurance, social security, automobile, housing, and news. It is a cost-effective solution thanks to its simple steps for performing remote identity authentication and service access.
Following an upgrade, liveness detection will offer two methods of authentication: static biometric verification and interactive biometric verification.
Static biometric verification has received some groundbreaking updates, by utilizing data in more than 200 scenarios. Such data is collected through cooperation with the data company, which makes this method useful in almost every scenario where it is needed.
Interactive biometric verification will come with a well-developed SDK, framework for calling its algorithms, and reference UI, which simplify integration.
These two methods can be used flexibly in situations such as authenticating user identity during insurance purchase, in the anti-addiction system for a game, during the real-name registration for SIM cards, and during the activation of a live-streaming function or reward permission.
By leveraging AI, ML Kit will make liveness detection more secure, accurate, and versatile to deliver a safer and more user-friendly experience for business and individual users.
To know more about liveness detection, please refer to its official document.
Thanks for sharing!!
Vivi Jiang said:
Facial recognition is used everywhere, such as for verifying your identity at the bank, clocking-in and –out for work, and even when entering some restricted buildings. On mobile phones, this technology allows us to unlock our phones and pay for things. And once integrated into apps, this technology facilitates easy sign-in and password change.
Behind the usefulness of facial recognition, however, lurks the risk that someone may use a fake face to trick and bypass this technology. The core concern for users of facial recognition is whether it is capable of telling whether a face is real or not.
The liveness detection service from HMS Core ML Kit overcomes this issue, and this explains why the APIs of this service have reached a great number of average daily calls and why it is well received among developers.
Following an upgrade to the liveness detection service, it will provide interactive biometric verification, aside from static biometric verification, helping improve user security and trust in facial recognition technology.
Identifying Each Fake Face Using Liveness DetectionFacial recognition is a technology that enables a machine to recognize a person's face. Most facial recognition systems, however, can simply recognize a face in an image, but cannot accurately determine whether the face is of a real person. This has sparked the need for technology that can automatically distinguish fakes faces from real ones, to prevent spoofing attacks.
Such technology can be realized using the liveness detection algorithm. It can detect such fake faces as those printed out, displayed on an electronic device, or disguised as a silicone mask or 3D portrait, to prevent fake face attacks.
This technology is widely used in finance, public affairs, and entertainment, which also makes its application challenging. For example, the expectations for liveness detection vary depending on the device, people, and environment involved, meaning that this technology needs to be constantly upgraded.
Improving User Experience with Interactive Biometric VerificationML Kit will offer the interactive biometric verification capability to strengthen the flexibility of its liveness detection service. An app with this capability can prompt a user to do either three of the following actions: blink, open their mouth, turn their head left, turn their head right, and stare at the camera. If the required action is not detected, the face will be deemed fake.
With the deep learning model and image processing technology, liveness detection is useful in many scenarios by providing prompts that indicate the lighting is too dark or bright, a mask or sunglasses are blocking the view, and the face is too near to or far from the camera. This ensures that the whole liveness detection process is efficient, secure, and user-friendly.
The liveness detection capability can help perform remote identity authentication in fields such as banking, finance, insurance, social security, automobile, housing, and news. It is a cost-effective solution thanks to its simple steps for performing remote identity authentication and service access.
Following an upgrade, liveness detection will offer two methods of authentication: static biometric verification and interactive biometric verification.
Static biometric verification has received some groundbreaking updates, by utilizing data in more than 200 scenarios. Such data is collected through cooperation with the data company, which makes this method useful in almost every scenario where it is needed.
Interactive biometric verification will come with a well-developed SDK, framework for calling its algorithms, and reference UI, which simplify integration.
These two methods can be used flexibly in situations such as authenticating user identity during insurance purchase, in the anti-addiction system for a game, during the real-name registration for SIM cards, and during the activation of a live-streaming function or reward permission.
By leveraging AI, ML Kit will make liveness detection more secure, accurate, and versatile to deliver a safer and more user-friendly experience for business and individual users.
To know more about liveness detection, please refer to its official document.
Click to expand...
Click to collapse
Is it free or paid?