MijnID - Security for an Android Application

摘要: This document reports the development of a proof concept for MijnID Android mobile application. Identity theft and identity fraud are serious problems, leaving thousands Dutch citizens with debts damages each year. aims to improve detection by providing users insight on what is happening their personal details as they stored in government databases. early key mitigate damages. In this report we discuss problem, project aims, outcome further development. The core functional features app consist verifying user DigiD, logging application PIN, viewing data safely reporting changes database user. focuses security privacy during transport it shown We use scrum test-driven guide process. Unfortunately will be target numerous types attackers attacks. map these attacks, define scope base requirements threats within that scope. Functional derived from wishes various parties involved. design process one constant adjustment changing limited experience play large role. implement well dummy environment, which consists server database. environment mimics behaviour real function. Furthermore, interact testing DigiD. Automated manual test outcomes used evaluate requirements. manage meet 80% all over 85% Challenges team faced discussed well. These challenges range implementation issues ethical considerations. Several recommendations provided deal open continue future.