APPLICATION SECURITY

A foolproof platform for  digital transactions

Duruj is PCI DSS, GDPR, & DSP2 compliant. It uses the most powerful security technologies like Biometric Authentication, AI, and NFC to offer you an advanced digital wallet solution.

Enjoy Duruj faultless security with full compliance

Offering advanced security is Duruj top-most priority and that’s why our solution is compliant with various security requirements and regulations.

  • PCI DSS

We are PCI – DSS compliant and eliminate the chances of storing sensitive data.

  • GDPR

Duruj is completely compliant with the GDRP data protection regulation thereby increasing the trust and credibility of the platform

  • DSP2

Duruj is compliant with various regulators ensuring DSP2 compliance.

What does Duruj’s advanced security system offers?

Duruj has an exclusive and advanced security system that protects data the moment it enters our system. Below are the few of Duruj’s advanced security system’s offerings.
Funds are held on our escrow account to ensure their availability while relieving you of the associated regulatory burden.
Regular checks by our specialists and penetration tests by certified auditors ensure our compliance with banking standards and regulation.
Payment data is encrypted to ensure that payment details may be kept for future use in a secure environment.
We ensure that all the API calls are authenticated with our advanced and secure military-grade encryptions.

Application Security

Duruj platform supports and utilizes unique user IDs along with secure authentication for all kind of access whether it’s administrative access or access to service authentication data. Secure authentication is imposed to all the accounts generated and managed by application.

Login and password management

Duruj platform assigns unique IDs for all the user accounts. It enforces the process of login and management for various interfaces through completion of installation and also for each subsequent change that is made after installation.

Secure preference library

The Secure Preferences library uses the AES algorithm which randomly generates encryption key during the first instantiation of “Secure Preferences” in the application. The key encrypts the key-value pairs which are then encoded with base64 algorithm.

Avoid reverse engineering proof with Proguard

Proguard makes it difficult to read your codes while decompiling. This command line tool shrinks, optimizes, and obfuscates codes even the pre-verified ones. These steps makes the codebase compact, and efficient thus making it difficult to reverse engineer an application

Restricting privileges with group access management

The Duruj platform also comes with User Access Management which restricts the access to required resources or functions along with enforcing the least privileges for the built-in accounts.

Audit Trail

The admin offers a comprehensive audit trail of all the activities on the system. The system tracks and logs all the activities that are performed by each user and the admin. Ddudj provides you with automated audit trails for the reconstruction of several events.

Log files maintenance

Saving database server’s logout output is better than completely discarding it. However, the large volumes of these data slow down the server. You can rotate the log files so that the new log files are added and the old ones are replaced after a reasonable period.

Securing data transmission

Duruj comes with a robust AES encryption method that secures data exchange in every transaction that takes place between ‘Administration Application’ (Server) and ‘Service Distribution Application’ (Client). The AES encryption ensures high security of Sensitive Authentication Data which is used for each transaction.

Key Generation for Application User

In Duruj, AES key is generated for every application that uses unique identification of user and the MSISDN & OTP. All the data exchange taking place between the server application and client after that are then encrypted using shared AES key.

Network Security with VPN and HTTPS

Duruj has established HTTPS and VPN tunnel for secure communication with the API Client based application. RSA tunnel is used for communication with mobile devices. Similarly, HTTPS protocol is used for communication with Web portals.

Key Protection

Duruj shields the Symmetric AES keys by storing them in HSM. Encryption keys are changed for keys after once a definite amount of cipher-text are produced by a given key. Keys are replaced by destructing and archiving to maintain the integrity of weak keys.

Securing data with SHA algorithm

Duruj uses SHA algorithms for the process of verifying the data integrity stored at the database level. This method compares the message digests which are calculated before and after the transmission. If the results don’t match then the server simply rejects the data.

SHA-256 Hashing

SHA-256 performs hashing function in which it converts the text of any length into the string of 256 bits. This algorithm can manage data string of any size and render a hash which is almost impossible to predict thus making it a reliable means of securing data.

Periodic Data backup

The Duruj uses the REST API which makes the server communication easier. It also takes backup of all the transactions that takes place via the platform. This backup facilitates the user to view past transactions quickly. Moreover, it also helps the admin to make reports.

Duruj’s success over the years

Over the years, Duruj has successfully delivered several customized and top-notch digital wallet solutions for its clients. You can get a glimpse of a few of those works here.

FinTech
Under NDA

Duruj has provided a dynamic e-wallet feature solution to its South African client

The application is more than what other e-wallet applications are available in the market. It has unique features, an extra layer of security to protect its customers, an intuitive user interface to provide an unforgettable experience.

Country
South-Africa-flag-2
South Africa
Solution
e-Wallet
Explore more
FinTech
Under NDA

Duruj provides a feature-rich digital wallet solution to its Bahamas-based client

Alliance Mobile Solutions is a FinTech startup based in the Bahamas. It aims to offer utmost ease and convenience in person-to-person transfer, bill payments, and merchant payment services via a robust mobile wallet solution.

Country
Bahamas-flag
Bahamas
Solution
e-Wallet
Explore more
View more

Ask us anything or just say hi...

Fill all your details in the form and one of our business consultant will get in touch you within 24 hours.

Get a live demo

Get a clear path to your financial goals.

Duruj®  is a great way to send money to friends and family, even if they bank somewhere different than you do. That means it’s super easy to pitch in or get paid back for all sorts of things like coffee for your coworkers or dinner with friends.

Product
Company
Resources
Legal

Copyright: © 2023 Duruj®. All Rights Reserved.

Request a Demo