This is a surprising reason why the banking application on the Huawei cellphone failed miserably even though it was already using MicroG

Since the geopolitical tensions that hit Huawei a few years ago, the Chinese technology giant has been forced to release its dependence on Google Mobile Services (GMS). Instead, they developed Huawei Mobile Services (HMS) based on Android Open Source Project (AOSP). For lay users, this change certainly presents its own challenges, especially when you want to run Google’s ecosystem applications naturally.

To bridge the gap, an open-source solution called MicroG emerged. Reporting from the official documentation of the MicroG project on GitHub, this platform is able to duplicate Google’s important library so that GMS-dependent applications can still run smoothly on non-Google devices. However, lately many users have complained about the crucial constraints: why aplikasi perbankan di HP Huawei still fails to function safely even though the microg is already installed? Let’s dissect the mechanism in depth and trace.

Understand the basic difference: Standard Android Phone vs Huawei Phone (AOSP)

On standard Android smartphones such as Samsung, Xiaomi, or Oppo, the operating system is directly equipped with the official Google Mobile Services (GMS) license. This means that users get full access to the Google Play Store by default and all the applications on it can function 100 percent without architectural constraints.

This condition is inversely proportional to modern Huawei cellphones that use AOSP. This device relies on Huawei AppGallery and HMS Core. As a result, popular applications made by Google such as YouTube, Google Maps, Gmail, to third-party applications that require Google server validation, cannot run naturally because they do not find the GMS foundation in the device’s internal system.

How to bridge the microg & Keybox works?

Realizing this gap, the Android developer community formulated a smart solution using a combination of MicroG and a keybox mechanism. Based on the operational schemes that are often discussed in world technology forums such as XDA Developers, here is the workflow of this system that is packaged to be easily understood by lay users:

1. MicroG installation: The first step begins by installing a microg core into the Huawei AOSP system instead of the lost Google Play Services.
2. Connecting to the Keybox Server: MicroG requires special credentials to be recognized by Google servers. The device will connect to the Keybox server provider.
3. Device disguise (spoofing): Through a valid keybox file, the system will manipulate the identity of the phone’s hardware. Your Huawei phone will pretend to be another device that has been certified by Google, for example disguised as Oppo A73.
4. Sending Validation to Google: When you open an application that needs GMS, MicroG will send a validation request to Google Server with the disguise identity.
5. Successful detection: Google Server reads that the request came from a legal device (OPPO A73), gave the green light, and finally the GMS-based application was able to run normally.

The Great Wall called Play Integrity: Why are the banking applications on Huawei cellphones still difficult?

If another application is successfully tricked with the undercover method above, then why aplikasi perbankan di HP Huawei actually block access and raise security errors? The answer lies in the latest layered protection system from Google known as Google Play Integrity API.

Adapted from the official Android Developers guide, Play Integrity API is the successor of the SafetyNet Attestation which is in charge of checking the authenticity of the software and hardware environment of a device in order to prevent fraud or financial manipulation. This system divides the security level into three main levels:

1. Basic Integrity

This level only checks if the basic structure of your Android software is not modified to the extreme. The method of undercover using the latest version of MicroG is generally very easy to pass this stage with a success (pass) status.

2. Device Integrity

At the second level, the system checks whether the device profile matches the certified Android compatibility standard. By utilizing the active Keybox file, the status device integrity can still be passed (pass) because the server detects your phone as another certified device.

3. Strong / Hardware Integrity

This is the biggest stumbling block. Level Strong Integrity Not just checking the software, but doing validation directly to the hardware (hardware) through the cryptographic key embedded in the factory default tee (Trusted Execution Environment) chip. Since the Huawei phone does not have a hardware encryption key registered in the Google server database, the checking process at this level is ensured Total Fail (Fail/X).

financial application and aplikasi perbankan di HP Huawei Requires the highest level of security (Strong/Hardware Integrity) to protect customer transaction data. When the system detects a failure in this hardware encryption layer, the m-banking application will immediately stop its operation to prevent potential data leakage.

Not because Huawei is not safe, this is purely a certificate problem!

It is important to note for all lay users that this failure is completely Not because your Huawei cellphone is not safe or vulnerable to being hacked. Architecturally, Huawei has a very sturdy internal security system, as evidenced by the Huawei Safety Detect Sysintegrity feature which is officially adopted on their own platform.

This problem is purely a cryptographic administration constraint and the incompatibility of the authentication certificate between the Google ecosystem and Huawei’s hardware comparator. The Google server refused to provide high-level validation because there was no official licensing cooperation for the hardware key.

The best solution for Huawei users today

For those of you who are very dependent on aplikasi perbankan di HP Huawei, no need to be discouraged. The tech community suggests the following cutting-edge alternatives to keep your financial activities uninterrupted:

• Use the official version in Huawei AppGallery: Many major banks in Indonesia have now released their application version natively in the AppGallery which is optimized for HMS without the need for Google Play Integrity.
• Take advantage of modern sandbox applications: Third-party services such as GBox or Gspace provide encrypted virtual isolation space that sometimes has more adaptive bypass tricks for certain banking applications.
• Monitor microG updates and community modules: Developers in global forums are constantly updating external encryption tools to look for new loopholes in skipping Google’s protection restrictions.