REL-ID Verify: Push Notifications

šŸ” REL-IDverify Overview

REL-IDverify is a secure transaction approval platform that enables enterprises to send real-time, actionable push notifications to users' registered devices for confirming sensitive operations.

āœ…

"Verify the right user, on the right device, at the right time."


šŸš€ Key Features

šŸ”” Push Notification with Secure Content Delivery

  • Uses FCM (Android) and APNS (iOS) only as a wake-up signal.
  • Actual sensitive data is fetched via REL-ID's MITM-proof secure channel after app wake-up.

šŸ‘† User-Initiated Action Prompts

  • Customizable buttons like Approve / Reject, Accept / Decline / Report Fraud.
  • Configurable authlevel for each action:
    • šŸ”“ 0: No authentication
    • šŸ”‘ 1: Password
    • šŸ›”ļø 3: Device LDA (Local Device Authentication)
    • 🧬 4: Server-side Biometric

āœļø Digital Signature Support (Optional)

  • Actioned content can be digitally signed on-device.
  • Server verifies using user's public certificate.

šŸ”„ Callback or Polling Support

  • šŸ“¬ Webhooks: REL-ID sends a callback to your server on user action or timeout.
  • šŸ” Polling: Periodic check for notification status using the Notification UUID.

🌐 Multi-Language Notifications

  • UI-level support to send multi-lingual messages with toggles (e.g., English, Spanish).

🧾 JWT Workflow Support

  • Generate and return a JWT upon specific user actions (e.g., "Accept").

šŸ›‘ Notification Limits & Abuse Control

  • Configure push notification thresholds (e.g., reject limit = 3 in 30 mins).
  • Prevent overuse or brute force scenarios.

🧠 When Should You Use REL-IDverify?

Use REL-IDverify in the following scenarios:

Use CaseBenefit
šŸ” Login ApprovalSecure user authentication on login attempts
šŸ’ø Transaction ConfirmationProtects money movement, fund transfers, and redemptions
šŸ“² Replace OTPStronger, phishing-resistant alternative to SMS OTPs
šŸ§‘ā€šŸ’¼ Regulatory ComplianceHelps meet RBI/PSD2/GDPR requirements
🧾 Secure Audit TrailsAll approvals digitally signed and time-stamped

šŸ“± Supported Platforms

  • āœ… Android
  • āœ… iOS

REL-IDverify integrates seamlessly with the REL-ID mobile SDK across platforms.


šŸ”§ Example Workflow

sequenceDiagram
    participant App as Enterprise App
    participant REL as REL-IDverify Server
    participant User as User Device

    App->>REL: Generate Notification API
    REL-->>User: Push Notification (via FCM/APNS)
    User-->>REL: Fetches transaction over secure channel
    User-->>REL: Action (Approve/Reject) with Auth (if required)
    REL-->>App: Callback with status or App polls for status

šŸ›”ļø Security Highlights

  • šŸ” End-to-end encryption
  • šŸ”‘ Device-bound credentials
  • šŸ“œ Auditable, signed transaction records
  • 🧬 Multi-factor authentication options
  • 🚫 Resistant to phishing, MITM, SIM-swap attacks

šŸ› ļø Developer Quick Links



🧩

Want to integrate REL-IDverify? Start with theGenerate Notification Request API.