Introduction

OneSpan App Shielding Secure Local Storage provides the ability to store data locally on the end-user device in a secure manner.

With the Secure Local Storage API, an app can dynamically store data in an encrypted format on the local device. All data stored using this feature will be encrypted according to the latest standards and recommendations.

The feature does not rely on device functionality (such as keychains) to provide secure storage of sensitive data, and is fully self-contained.

The encryption keys used are never stored on the device, or added in the static code of the app, but are dynamically generated on the device protected by the OneSpan App Shielding White Box Cryptographic engine. This further ensures that the data is device-bound, and cannot be copied to a different device. The encryption keys are derived from a combination of application package ID (bundle ID), device bound identifier, customer specified token and data id (the key of the key-value data to be stored).