Banking App security

For the newly developing mobile banking app, it is required to identify the iOS device uniquely.

The main reason for that is, as this app has designed to allow bank's customers to perform financial transactions,

if fraudulent/suspicious transaction(s) happened, bank should be able to trace the Actual device, its relevant information.


That information will be used to investigate about that scenario. Further would be produced as legal evidence.


This is an internal system audit and compliance requirement as well.


If banks’ to introduced this traceability feature within its iOS app, firstly,

that app will request customer's permission and will be distributed to general App Store customers.


Kindly requesting an in-depth answer for this scenario from Apple and fellow developers.


Your current approaches and best practices in the industry is highly appreciated.


Thanks in advance.

Apple eliminated the ability of an app to uniquely detect the device many years ago. Before that the UIDevice had a property "UUDI" or "uniqueDeviceIdentifier". After this was eliminated, there was discussion about using the wi-fi MAC Address or the Bluetooth Mac address of the device as unique. I don't recall if that will still work - I do believe Apple randomized the wi-fi Mac Address to avoid the device being followed by a remote wi-fi network. Ultimately Apple introduced identifierForVendor that works as long as a developer's app remains installed. Alternatively, an app can write something to the keychain or to the users iCloud Account - but that won't solve your problem. You would need to contact Apple to request access to such an identifier.

I wonder if this is the source of my issue. Ever since I upgraded to the iPhone 11, my bank’s app hangs on “Securely logging in.” I now have an iPhone 12 and not only do I still get this error, the same error exists on my iPad which was set up new and is not an upgrade. . The bank’s technical team, T-Mobile, and Apple all point their fingers at each other regarding this issue. Where is the problem??
Banking App security
 
 
Q