Attestation & Monitoring Service
Getting Started
Introduction

Attestation & Monitoring Service (AMS)

The Attestation & Monitoring Service (AMS) checks that SoftPOS apps and the phones they run on are secure enough to take payments. It registers every MineSec SDK instance, runs security checks on it, blocks devices that fail them, and lets your payment backend read the result before it authorizes a transaction.

AMS is a certified PCI MPoC Attestation and Monitoring Service. See the PCI listing (opens in a new tab).

Do you need to integrate with AMS?

AMS runs on every integration path, but only one path requires you to call it:

PathWhat you do with AMS
Build your own SoftPOS appYour backend calls the AMS API to check each SDK instance before it authorizes a transaction. You can also monitor SDK instances in the AMS Portal.
Embed payments in your appNothing. MineSec runs AMS for the Embedded Payment SDK.
Launch MineSec Pay 7Nothing. MineSec runs AMS for the app.

How the SDK works with AMS

You do not call AMS from your app. The SDK handles it:

  1. Registration: when your app initializes the SDK, the SDK registers with AMS. Registration also provisions the payment keys, and gives each SDK instance its own ID, key encryption certificate and signing certificate.
  2. Attestation: the SDK runs device and runtime checks and sends the results to AMS. It attests again whenever your app returns to the foreground.
  3. Enforcement: if an SDK instance fails attestation, AMS can block it, and the SDK stops taking payments.

Your backend then uses the AMS API to:

  • Get SDK info: read an SDK instance's details, including the public key your host uses to wrap keys for that instance.
  • Get attestation status: read the latest attestation result before authorizing a transaction.

Re-registering an SDK instance changes its key encryption and signing certificates. Read the SDK info again after a re-registration.

Environments

Each SDK variant connects to its own AMS environment:

SDK variantAMS environment
core-mpoc-stageTest environment, for integration and testing
core-mpocProduction environment

Features

  • Attestation: processes health-check data from the SoftPOS app and the device, and enforces security policies.
  • Lifecycle management: tracks each SDK instance from registration onward, and can block suspicious devices.
  • Monitoring: detects, alerts on and mitigates threats to the SoftPOS app and the device.
  • Backend API: REST APIs let your payment backend read SDK information and attestation status.

Supported SDKs

Next steps

Getting started