Secure Phone Attestation For Free

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices.

SafetyNet Attestation API ? Checks whether the gadget the application is attempting to run on is tampered or potentially compromised. It compares the device's profile with that of Google certified devices and verifies if the device or the software running on it is Android compatible.

App attestation uses a series of integrity tests and measurements to verify an app's integrity. Once integrity is proved, a cryptographic is provided and shared with the backend servers for verification.

This attestation provides assurance that the properties of the device (for example, the serial number) are legitimate (as attested to by the device's Secure Enclave and verified by Apple's servers) and not spoofed.

Key attestation aims to provide a way to strongly determine if an asymmetric key pair is hardware-backed, what the properties of the key are, and what constraints are applied to its usage. ID attestation allows the device to provide proof of its hardware identifiers, such as serial number or IMEI.

Setting SafetyNet attestation Log into the Admin Portal. Go to Policies & Configs > Policies. Select a security policy and click Edit. Alternatively, create a new security policy by clicking Add New > Security. Scroll down to the Android section. Select ?Require Google SafetyNet Attestation?.

The attestation process uses a series of measurements that are unique to an enclave. You can use these measurements to create access policies in external services to grant the enclave access to special cryptographic operations.