bcgov / bc-wallet-mobile

BC Wallet to hold Verifiable Credentials
Apache License 2.0
60 stars 45 forks source link

Block screenshots #1103

Open cvarjao opened 1 year ago

cvarjao commented 1 year ago

User story

As an organization I want to ensure that personnel are unauthorized to take screenshots of the verification results on their device or through an integration which may enable them to capture the photo of the ID holder and other personal information so that I may comply with my privacy policies

As a wallet holder, I want to ensure that my information isn't being shared without my consent so that I can reduce identity fraud

As a verifier I want to ensure that the information shared isn't a screenshot of someone else's information, so that I can reduce identity fraud and verify the correct person.

Acceptance criteria

Spike Acceptance Criteria

knguyenBC commented 4 months ago

Took it out of icebox as this may be an important feature for a use case. This is a copy of their a risk they identified:

"Unauthorized capture of personal information by the Verifier through taking a screenshot of the verification result on their device or through an integration which may enable them to capture the photo of the ID holder and other personal information."

knguyenBC commented 4 months ago

Android allows for screenshot blocking but iOS does not. There are some workarounds but they're not clean solutions.