Our idea is to build an application that collects veifies and stores some personal data and sensitive documents in dedicated secured environment and it authenticates with other applications without revealing any unecessary data. This prevents data breach and data theft by a great margin. This acts similar to single sign on mechanism, where the single created account is used to access various services. This application could be used as an authenticator with other application like "Sign in with Google" feature. Main aim here to prevent unecessary data collection, data processing and unsecure data transit. Companies collect excessive data for their personal gains. This not only affects one's privacy, it also involves risk in data breach which could lead to a huge loss.

Our app collects, verifies and stores important personal and legal data and documents. Main aim of our app is to stop personal data processing in the inetgrated applications. An application could request information on an induvidual upon registration, where the person will have to approve which data could be shared and which should not. Only the basic details will be shared with the application initially. Application should provide reason and need for collecting required sensitive data and data transit and endpoint will be checked for vulnerabilities and then the requested data will be provided.

For example, Let's take an online ecommerce site. Typical ecommerce site involves in handling, processing and storing more sensitive data. Let us assume a person is registering with an online store. Initially, he has to register with us and provide some basic data and stuff. This is similar to "Sign in with google" option. Hes could use the similar option here and register with the store. All these process will be done only once and just a click could register with any other site which has our integration. Main flaws with Google is that it provides every requested data to the application. Any one could create a google sign in integrated application easily without any verification. This allows malicious actors to create a fake application where this sign in feature could be used to steal personal data. Our next concern is data processing. Many applications fail in data processing. They do atleast have a vulnerability in their application which could lead to a massive data breach. In the above scenario, a person is about to place an order. His Location and payment details should be collected and processed. Person will be notified during the checkout and he do need to grant permission for every data that is requested. In this case, Location and payment details. Every ecommerce site will partner with delivery service. Here the location data is necessary to be shared with only delivery service. Our app shares the needed sensitive data in a secured way. Many of the ecommerce site have partnered with secured payment processors. But some sites do store and forwards card details. That is not a good practice and this would be serious in case of a data breach. This could be managed with our application, by securely sharing card details with payment processor only at the required time.

This app ensures how secure the data is processed and transmitted among other applications, what data is shared and why the data is required. Data Protection and Privacy is emphasized. This would surely reduce data breach and data theft by a great margin.

Built With

Share this project:

Updates