Jump to content

Play Integrity API

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by 2a02:aa12:a77e:5780::15ce (talk) at 08:41, 1 July 2022. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

The SafetyNet API[1] is a set of security application programming interfaces (APIs) offered by the Google Play Services to support security sensitive applications. One of these APIs, the SafetyNet Attestation API[2] provides verification that the integrity of the device is not compromised.[3][4][5] In practice, non-official ROMs such as LineageOS fail the hardware attestation and thus restrict the user from enjoying a pure Android implementation (without the Google Services) while being able to use third-party apps (mainly banking). Due to this, some consider this a monopolistic practice deterring the entrance of competing mobile operating systems in the market. [6]

The SafetyNet Attestation API (one of the four APIs under the SafetyNet umbrella) has been deprecated[7] and will be replaced by the Play Integrity API soon[8]. Like the SafetyNet APIs, the new Play Integrity API is offered by Google Services and thus is not available on totally free Android environments (AOSP). Therefore, apps that require the API to be available may refuse to execute on AOSP builds.


References

  1. ^ "SafetyNet Overview". Android Developers.
  2. ^ "SafetyNet Overview". Android Developers.
  3. ^ Hoffman, Chris. "SafetyNet Explained: Why Android Pay and Other Apps Don't Work on Rooted Devices". How-To Geek. Retrieved 2021-09-11.
  4. ^ "Google's dreaded SafetyNet hardware check has been spotted in the wild". Android Police. 2020-06-29. Retrieved 2021-09-11.
  5. ^ Ibrahim, Muhammad; Imran, Abdullah; Bianchi, Antonio (2021-06-24). "SafetyNOT: on the usage of the SafetyNet attestation API in Android". Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services. Virtual Event Wisconsin: ACM: 150–162. doi:10.1145/3458864.3466627. ISBN 978-1-4503-8443-8.
  6. ^ Schwab, Andreas; Echeverria, Pablo Arias (24 March 2022). "Time to restore fairness and contestability in digital markets". www.euractiv.com.
  7. ^ "SafetyNet Deprecation Timeline". Android Developers.
  8. ^ "Migrating from the SafetyNet Attestation API | Google Play". Android Developers.