The HMS Core Push SDK is integrated into your app during app packaging. It works only when requested.
Declare the following permissions on the HMS Core Push SDK:
android.permission.INTERNET: Internet permission.
android.permission.ACCESS_NETWORK_STATE: Network status check permission.
android.permission.ACCESS_WIFI_STATE: Wi-Fi status check permission.
android.permission.WRITE_EXTERNAL_STORAGE: SD card write permission required to save the downloaded upgrade package when the SDK instructs HMS Core (APK) upgrade.
For details, please refer to Privacy Statement and Push Kit Personal Data Processing Information.
The data security of the HMS Core Push SDK is ensured at three levels.
Huawei provides authentication certificates externally. To ensure that the app server is connected to the HUAWEI Push Kit server, you can use the public key to verify the fingerprint of the Huawei certificate and the address in the certificate.
When messages are sent from the HUAWEI Push Kit server to devices, user information or sensitive information is encrypted or anonymized. If the device identity cannot be verified, you need to take necessary security measures at the application layer based on service scenarios.
HUAWEI Push Kit can be used to send data messages and notification messages.
1. Data messages will be sent to apps by starting the corresponding Service.
● On Huawei devices, the HMS Core Push SDK automatically declares the signatureOrSystem permission in the AndroidManifest.xml file, so that the required Service will not be called by other apps.
● On non-Huawei devices, the Service component is used to enhance the security of HUAWEI Push Kit.
2. Notification messages received by devices are displayed in NC, and they will be sent to apps only when users tap them.
NC is preinstalled on Huawei devices. It displays notification messages from HUAWEI Push Kit, and the message security is guaranteed by Huawei.