DOCUMENTATION & API

PRODUCT: CERTIFIED PHOTOS

OBJECTIVES

This product is a smartphone APP and is comprehensive to get certified photos for any kind of use, both individuals and business companies. It contents many security hacks at all the step of use. it doesn’t need any technical proficiency to enjoy it. The outcome is a pdf file with all meta data to provide anteriority and integrity. Identity may also be an additional feature if photos and/or video are taken with individuals (stakeholders)

HOW IT WORKS

The certified photos are a product of the Certisio Mobile APP. The end-user download, install and register. After the email address validation, the APP is ready to be used.

Create a folder (call dossier in the application) where media will be store (photo and video. The number of photo and video which could be taken depend on the end-user account:

  • free plan. 2 photos max for each folder
  • Corporate plan. most of case: 10 media, 2 video. They are customized according to the client environement and final use.

HOW TO CERTIFIED PHOTOS BY RECORDING THEM INTO THE BLOCKCHAIN

  • Open Certisio mobile app
  • Create a folder
  • Take photo and video
  • Generate a certificate
  • Receive an email wih the link to the pdf file (certificate)
  • Download the certificate before it is deleted from the temporary location between 7 to 30 days.
  • Certificate may be stored in a dedicated location. The storage, protection, backup, surveillance, recovery are provided by Certisio, the end-user or a third party.

No API is provided for this solution. In order to interface the pdf file (certificate) with an application server, the file naming will be helpful :

  • Company Token (each corporate has a unique token or code)
  • Company name
  • Dossier typed by the end-user
  • End-user name
  • Unique pdf reference

Example: HASMZ-teslacorp-affaire-122-contract9-z4u7xysxlxjqg.pdf

HASMZ : company token of reference for certisio. It could also be a representative, sub-contractor or a directorate, business unit, etc.

teslacorp : name of the company of the end-user or the subcontractor or the prime contractor

affaire-122-contract9 : This is the full name of the “dossier” created by the end-user in the smartphone. This string is typed by the end-user. The definition and format of the dossier should be the responsibility of the client representative or by default, the end-user or the subcontractor or the prime contractor. The end-user may enter several space which will be automatically transformed to hyphen code (the character ‘-‘) in order to foster the classification. In our example, this dossier is related to the affair No122 and the contract name contract9. Maximum characters of the dossier name : 25 (including separator)

z4u7xysxlxjqg : This reference is given by certisio and cannot be modified. fixed length : 13 characters

End-user should use this file naming to extract from the subject suitable information for classification and further task (transfert, database update, etc.)

HOW TO READ EASILY VIDEO EMBEDDED ?

On Acrobat Reader, click on the triangle to show the left and vertical bar menu.

double click on the video to play it. The default video player will automatically run

Feel free to use this solution with the free plan. As individual you can create unlimited folders (each forlder contents 2 photos max) for free

This image has an empty alt attribute; its file name is google_play_3.png

MINIMUM CONFIGURATION REQUIRED

IPHONE : IOS 8.0
iphone 5C, iphone 6, iphone 7, iphone 8, 10R, 11, 12, ipad mini, ipad, ipad pro
ANDROID : 4.3
Samsung Galaxy serie A, S, oneplus, Sony, Xiaomi, crosscall, etc.

Check by installing Certisio APP from AppleStore or Google Play. Try and enjoy the features. Request a corporate account to assess the video features with your smartphone

Configuration of Android to enable video compatibility

  • Change the video of android. Start the camera, answer ‘yes allow’, select VIDEO, then press the botton settings on the top right screen, change ‘video encoding’ to H264 and video resolution to ‘720p’. Qui the camera
  • Go the google Play and install certisio, start certisio and answer ‘Allow Certisio to take pictures and record video’ Allow. Allow Certisio to access this device’s location Allow all the time. To the question Allow Certisio to access photos, media, and files on your device ? Allow. Allow Certisio to record audio.
  • Start the registration. For corporate registration, use pro account and enter the private token given by the administrator. Check he box to confirm you have read and accepted the general terms. Have a visit with tutorials or skip them. (‘ignore’)
  • Restart the smartphone
  • Start Certisio. Click on the buttom ‘GPS is not activated, touch to acticate’. Enable ‘Use Location’, Go to the ‘APP Permission’, click on ‘Certisio’ and select ‘Allow all the time’. Check all permission by cliking to the link ‘See all Certisio permissions’. You should have : Camera, Location, Microphone, and storage.
  • Go back to certisio, add a new folder and take pictures and videos
  • Generate a certificate

Reset Android. How to reset a smartphone android ? If you consider to dedicate an entire smartphone to Certisio and erase all currrent data/app before installing certisio, you may erase all from the Smartphone to get original firmware version. Here are the steps (used and tested with OnePlus Nord N100 Android 10.5.10.) Please, don’t use this process on your personal smartphone.

Procedure. Settings, system, Reset options, Erase all data (factory reset), ‘Erase internal storage’ enabled, press the button ‘erase all data’

Video files. The smartphone should provides video 720×1280 AAC, H264. Sized between 10 MB and 15 MB for 30 secondes. Confer to the contract for the number of total media (images + videos) and the duration in secondes (for each video)

Suggestions

  • Once the location (GPS) is enable, don’t disable it. You could save 1 minute of latency due to GPS discovery process from the smartphone
  • Switch-On the smartphone long time enough before starting for readiness
  • For professional use, create all folders the day before, so you could easily type the right name (client ID, affair ID, context, etc.) and avoid searching for those informations once you are already on the field
  • If you need to report proof for third party, type the phone number of the contact who could be reach by your client. With the credential of persons present on the area, include them in the pictures; For example, take a selfie of the group including yourself and the attendees. Take them in a separate folder so pictures will not be sent to the client. In case of litigation, you could easily catch this additional certificate and show it. Hence, you will preserve privacy of the people very efficiently up to 99,99%. Taking photo of people reduces drastically the fraud of documents. Keep in mind you are responsible of your client data, even if you sub-contract the storage works.
  • Define and set a file naming protocol together with you client before the creation of folders on the terrain. You will save time later when searching for the link between each folder (certificate) and client affair to reconcile data from all sides with the PDF

PRODUCT: BLOCKCHAIN RECORD API (For any data)

OBJECTIVES

The blockchain record API is a service to be typically inserted into an application in order for the automation of process. The request of the blockchain record is done only with s simple script. A track record ID is sent back in json format to the sender

This service provides a record on the solid and independant blockchain. Since the transaction cannot be cannot be modified, removed, corrupted, etc. it uses a short field in the transaction stored in the blockchain. Nobody can call in question the integrity and the anteriority. T

Using a hash of the data make this service available for everyone, individuals, business companies and technicians (developers, administrator, software integrators) or machine to machine automation. So it doens’t need to provide data to operate the process.

The record process through an API is more intended to be used :

  • for machine to machine interface
  • in a manually record (in smaller measure)
  • into a software, scripts, engines

HOW TO RECORD DATA AUTOMATICALLY ON THE BLOCKCHAIN

Any kind of data may be recorded on the blockchain using the Hash256 of the data. This feature may be integrated within an existing platform or software operated by the client. Here is the related simple API to set this interface from client side. Request a Private Key to test this service

The system doens’t allow any double record of the same hash256. This engine is used by the CERTIFIED PHOTOS product. If you plan to record a file, photos, video, we strongly advice to use either CERTIFIED PHOTO APP product or OFFICIAL ISSUANCE product.

Hash Calculate. For the hash256 process, the end-user may use

For MAC OS X. type : shasum -a 256 /user/dupont/desktop/file

For windows. Install and use openssl (download here : openssl.org). Type openssl dgst -sha256 file.txt

For integration into an application. Calculate the hash256 and execute the command line:

Main Command

curl --request POST --url https://credential.cdrco.org/bitcoin_record_json.php

Additional fields

–header ‘notify: N’ After the transaction confirmation an email is sent to the end-user if set ‘Y’

–header ‘managerkey: SJgdertXsDERLKdhfrnsnSeazW’. This 26 C field is a key password of the account. It is case sensitive. To identify its account and get support, the end-user may use managerpubkey and mention it for support instead of the password. Requested field

–header ‘hash: fd513b143a0beba3c06bc097cb1ff04cfd7985a650e1e1b5e8b71c11fdd2e223′. The hash256 to be recorded in the blockchain. We allow only one record on the blockchain. The archive on certisio storage is accessible for its author. Requested field

Example of request :

curl --request POST --url https://credential.cdrco.org/bitcoin_record_json.php --header 'notify: N'  --header 'managerkey: SJgdertXsAZEDCdhfrnsnSeazW'  --header 'hash: fd513b143a0beba3c06bc097cb1ff04cfd7985a650e1e1b5e8b71c11fdd2e223'

Example of success outcome

{"error":"null","message":"The record has been submitted  Successfully","record_id_str":"DO5fpuHRfyxQRrkjL3kMCL8803","key_pub":"LuT93OU5yCUbfYLVLAmprJ7Q2H","Hash":"fd513b143a0beba3c06bc097cb1ff04cfd7985a650e1e1b5e8b71c11fdd2e223e223"}

Example of error outcomes

{"error":"2","message":"Error : hash already exists","verify":"https://verify.certisio.net/verify-record.php?fd513b143a0beba3c06bc097cb1ff04cfd7985a650e1e1b5e8b71c11fdd2e223","status":"F"}
{"error":"4","message":"Error : your managerkey is wrong. Verify it and try again"}

Error list :

1 : Error : your private Key is wrong
2 : Error : hash already exists
3 : Error : Hash is not an hex
4 : Error : Manager_Key length is not correct
5 : Error : Hash length is not correct
6 : Error : the quota of record allocated is insufficient. Request more quota to the administrator
7 : Error : Expecting a POST request not Get request. Confer to your administrator for syntax and mandatory parameters

PRODUCT: OFFICIAL ISSUANCE USING A BLOCKCHAIN

OBJECTIVES

This service allows end-user to generate official documents in order to assure the authenticity from the unique issuance entity. Any type of credential: diploma, attendance certificate, academic credential, property certificate, technical expertise, luxury registration, official ledger, cadaster, owner-buyer, etc. may be issued.

SUBMITTING A NEW CREDENTIAL TO BE RECORDED ON THE BLOCKCHAIN

It uses a dedicated engine to set transaction on the blockchain on contrary to the two other protects namely CERTIFIED PHOTO APP product and OFFICIAL ISSUANCE product.

The hash is inserted into the transaction stored definitively in the blockchain. For the two following methods, the end-user will get the pdf certificate by email (link)

Method #1 Using a classic form

URL : https://credential.cdrco.org/form_submitting_file_credential.php

The end-user prepare its original document: image or pdf file. The user simply fulfils the form and submit it

Method #2 Using an API

This API may be used for the automation of official documents. This process accepts the following file types : png, jpg, pdf only. If the end-user have multiple files and heterogeneous nature, it is strongly recommended to encapsulate first all contents into a unique pdf then submit it

Main Command

curl --request POST --url https://credential.cdrco.org/submitting_file_credential_json-v2.php

Additional fields

–header ‘content-type: multipart/form-data’ To enable the file upload to the server

–header ‘User-Agent: bestHTTP’. To avoid deny from the server because of unknown or suspicious navigator. Requested field

–header ‘hash: fd513b143a0beba3c06bc097cb1ff04cfd7985a650e1e1b5e8b71c11fdd2e223′. The hash256 to recorded. Only one record is allowed on the blockchain. The archive on certisio storage may be used to get access to the desired file

–header ’email: emailaddresse’. Email address of the final recipient (holder) where the link of the credential will be sent by mail. See next field sendmailtoholder

–header ‘sendmailtoholder: true’. If enabled, the holder will received an email to notify the record completion and link to the file to download

–header ‘firstname: Eric’. Requested field

–header ‘lastname: DURAND’. Requested field

–header ‘credentialtitle: CISSP’. Requested field

–header ‘credentialdateissued: 01/09/2020’. Requested field

–header ‘credentialdateexpireon: 01/09/2029’. Requested field

–header ‘credentialdescription: IT & Security Master diploma’. Requested field

–header ‘credentialissuer: NEW-YORK-ACADEMY’. Requested field

–header ‘keyprv: SdedJufgTrsWa’. 13 C for the password account. Requested field

–header ‘bitcoin: false’. To enable a record in the BTC blockchain

–header ‘dogecoin: true’. To enable a record in the Gogecoin blockchain

–header ‘nature: CREDENTIAL’. Field of the credential nature (credential, diploma, authenticity, origine, anteriority, etc.)

–form file1=@/home/durant/credential.jpeg. The field provide the full path of the document to be uploaded. Its hash256 be stored in the blockchain and binary file embbeded into the final certificate outcomes. For microsoft, one should type the corresponding microsoft, for example: –form file1=@D:/all-my-files/credential.jpeg. Requested field

Example of request

curl --request POST --url https://credential.cdrco.org/submitting_file_credential_json-v2.php   --header 'content-type: multipart/form-data'   --header 'User-Agent: bestHTTP'   --header 'email: eric.durant@gmail'   --header 'sendmailtoholder: true'   --header 'firstname: Eric'   --header 'lastname: DURANT'   --header 'credentialtitle: CISSP'   --header 'credentialdateissued: 01/09/2020'   --header 'credentialdateexpireon: 01/09/2029'   --header 'credentialdescription: description diplome'   --header 'credentialissuer: UNIVERSITY of NEWYORK'   --header 'keyprv: FAAlmdBZ8JDn2'   --header 'bitcoin: false'   --header 'dogecoin: true'   --header 'nature: CREDENTIAL'   --form file1=@/Users/durant/Desktop/picture-diploma-eric-durant.png

Example of error outcome

{"error":"null","message":"The credential has been submitted Successfully","hash256":"07f0f066fc0af8341ad07006a6ee018ebcf1400cfece4ab469e28e420ef6702b","manageractif":"Y","bitcoinquota":"0","dogecoinquota":235}

The error 6 : file already recorded displays the status of the ongoing blockchain transaction (txdogecoindone and txbutcoindone)

{"error":"6","message":"Error : this file has been already recorded in our database, please select another file","txdogecoin":"","txbitcoindone":"N","txdogecoindone":"N"}

Example of successful outcome

{"error":"null","message":"The credential has been submitted Successfully","hash256":"34ebb68af7ef8582c6e5170d3163c6302c0a4f4fde095a4f8c092a3f5982bbe5","manageractif":"Y","bitcoinquota":"10","dogecoinquota":253}

Error list:

1 : Error : your private Key is wrong
2 : Error : please select a valid image file jpg, png or gif, or alternatively a pdf file
3 : Error : your file size exceeds the limit allowed : 10 MB
4 : Error : the quota of dogecoin allocated is insufficient. Request more quota to the administrator or select bitcoin
5 : Error : the quota of bitcoin allocated is insufficient. Request more quota to the administrator or select bitcoin
6 : Error : insert database_mysql impossible
7 : Error : code manager incorrect, account not valid, please contact the administrator
8 : Error : No file selected, please select a valid file
9 : Error : Credential invalid
10 : Error : POST mandatory
11 : Error : firstname required
12 : Error : lastname required
13 : Error : credentialtitle required. Please verify it and try again
14 : Error : credentialdescription required. Please verify it and try again
15 : Error : credentialissuer required. Please verify it and try again
16 : Error : manager private Key not valid. Please verify it and try again
17 : Error : Email not valid. Please verify it and try again

PRODUCT: BLOCKCHAIN RECORD API

OBJECTIVES

The blockchain record API is a service to be typically inserted into an application in order for the automation of process. The request of the blockchain record is done only with s simple script. A track record ID is sent back in json format to the sender

SUBMITTING A NEW HASH256 BY API COMMAND TO THE BLOCKCHAIN

For manual use, the end-user needs the CURL to be installed in the computer.

For the hash256, the end-user may use

For MAC OS X. type : shasum -a 256 /user/dupont/desktop/file

For windows. Install and use openssl (ddownload here : openssl.org). Type openssl dgst -sha256 file.txt

For integration into an application. Calculate the hash256 and execute the command line:

USE CASES

Business sectors. Platform, marketplace, ERP, business applications, mobile APP, etc.

Small business or individuals. Command-line done on terminal for process-server, Notary, officials, lawyer, jurist, attorney (or the team members), artisan, car-drivers, car-valet, renter

DOCUMENTS

The data record is posted to the time servers just after the request post.

BLOCKCHAIN RECORDS

Each document Hash is recorded into the bitcoin Blockchain. Before the blockchain record through a BTC transaction, the hash256 is gathered in a Merkle tree to reduce the number of hundreds of hash256 (2 hash to 1 hash) to only one hash256, called Merkle root

The blockchain record is a hex string which could be accessed by the same json post request : 

https://verify.certisio.net/verify-record.php?fd513b143a0beba3c06bc097cb1ff04cfd7985a650e1e1b5e8b71c11fdd2e223

The application where the json command-line is done can resume its own process without worrying about the record on the blockchain. It can be retrieved at any time with the link to the proof page

PREREQUISITES

The end-user has to collect data and calculate the hash256 of the unique file envelop (zip, dat, pdf, etc.). This only step id done easily in an application

PRICE

The price is based on the monthly plan subscribed

  • 100 requests / month
  • 200 requests / month
  • 500 request / month
  • More