commit ae48e21742a054e18da54daa905fca9cb41b50df
parent 4210970e694478aed1efb29631f366e6981fbe19
Author: Christian Grothoff <christian@grothoff.org>
Date: Wed, 28 Aug 2024 10:28:34 +0200
update release notes
Diffstat:
8 files changed, 70 insertions(+), 0 deletions(-)
diff --git a/static/images/ios-screenshot-2024-08-27-01.png b/static/images/ios-screenshot-2024-08-27-01.png
Binary files differ.
diff --git a/static/images/ios-screenshot-2024-08-27-02.png b/static/images/ios-screenshot-2024-08-27-02.png
Binary files differ.
diff --git a/static/images/ios-screenshot-2024-08-27-03.png b/static/images/ios-screenshot-2024-08-27-03.png
Binary files differ.
diff --git a/static/images/ios-screenshot-2024-08-27-04.png b/static/images/ios-screenshot-2024-08-27-04.png
Binary files differ.
diff --git a/static/images/ios-screenshot-2024-08-27-05.png b/static/images/ios-screenshot-2024-08-27-05.png
Binary files differ.
diff --git a/static/images/ios-screenshot-2024-08-27-06.png b/static/images/ios-screenshot-2024-08-27-06.png
Binary files differ.
diff --git a/static/images/ios-screenshot-2024-08-27-07.png b/static/images/ios-screenshot-2024-08-27-07.png
Binary files differ.
diff --git a/template/news/2024-24.html.j2 b/template/news/2024-24.html.j2
@@ -18,10 +18,80 @@ Notable changes include:
<li>Various minor bugfixes, user experience and documentation improvements</li>
</ul>
<p>
+Our AML/KYC work was partially funded by <a href="https://nlnet.nl/project/GNUTaler-KYC/">NLnet grant 2022-08-058</a>.
Our work is co-funded by the European Commission and the Swiss State Secretariat for Education, Research and
Innovation (SERI) as part of the <a href="https://taler.net/en/ngi-taler.html">NGI TALER</a> project.
</p>
+<h4>KYC/AML code and documentation</h4>
+<p>
+The new KYC/AML functionality has code sprinkled all over the place,
+so here is an overview of where you find the main components:
+<ul>
+ <li>The <a href="https://docs.taler.net/taler-kyc-manual.html">Exchange KYC/AML Operator Manual</a>
+ is a new manual documenting the exchange setup for KYC and AML processes</li>
+ <li>In our <a href="https://docs.taler.net/design-documents/023-taler-kyc.html">Taler KYC</a>
+ design document we documented our requirements analysis and the high-level the design.</li>
+ <li>The <a href="https://docs.taler.net/manpages/taler.conf.5.html">taler.conf man page</a>
+ documents various new configuration options related to AML and KYC processes.</li>
+ <li>The <a href="https://docs.taler.net/core/api-bank-wire.html#tsref-type-IncomingKycAuthTransaction">Taler Wire Gateway HTTP API</a> was extended with a new <tt>IncomingKycAuthTransaction</tt> type
+ that is used to demonstrate control over a bank account to the exchange.</li>
+ <li>In the <a href="https://git.taler.net/exchange.git/tree/src/exchangedb">exchange database</a>
+ code the main tables related to AML/KYC are <tt>aml_history</tt>, <tt>kyc_attributes</tt>, <tt>kyc_events</tt>, <tt>legitimization_measures</tt>, <tt>legitimization_outcomes</tt>, <tt>legitimization_processes</tt> and <tt>kyc_auths_in</tt>.</li>
+ <li>The main <a href="https://git.taler.net/exchange.git/tree/src/exchange">exchange endpoints</a>
+ are the <a href="https://docs.taler.net/core/api-exchange.html#kyc-status-updates">KYC</a>
+ and <a href="https://docs.taler.net/core/api-exchange.html#aml-operations">AML</a> operations
+ as well as some new <a href="https://docs.taler.net/core/api-exchange.html#post--management-aml-officers">management endpoints</a>.</li>
+ <li>The single page apps for <a href="https://git.taler.net/wallet-core.git/tree/packages/aml-backoffice-ui">AML</a>
+ and <a href="https://git.taler.net/wallet-core.git/tree/packages/kyc-ui">KYC</a> are in the <tt>wallet-core.git</tt> repository. There, you also find the new <a href="https://git.taler.net/wallet-core.git/tree/packages/challenger-ui">Challenger user interface</a> for our <a href="https://git.taler.net/challenger.git/">Oauth 2.0-based address validation service</a>.</li>
+ <li>The <a href="https://git.taler.net/exchange.git/tree/src/auditor">Taler auditor</a> was also
+ modified to better handle outgoing wire transfers blocked on KYC. In particular, the new
+ <a href="https://git.taler.net/exchange.git/tree/src/auditor/taler-helper-auditor-wire-debit.c">taler-helper-auditor-wire-debit</a> will initially report missing outgoing wire transfers when an
+ exchange fails to perform a transfer due to a pending KYC requirement.
+ However, once the KYC process has completed and the wire transfer is made by
+ the exchange, the warning will be automatically
+ be <a href="https://git.taler.net/exchange.git/tree/src/auditordb/pg_delete_wire_out_inconsistency_if_matching.c">cleared</a>.</li>
+</ul>
+</p>
+<h4>KYC in Action</h4>
+<p>
+The following screenshots show (some of) the new KYC functionality
+in action using an iOS wallet. The backend was configured to use
+the "KYCS" test currency for demonstration purposes. It uses two
+KYC rules: (1) triggers KYC to identify the bank account owner when
+withdrawing more than 50 KYCS, and (2) triggers KYC to identify a
+wallet owner if the wallet balance crosses 100 KYCS.
+</p>
+<p>
+We start with a virgin wallet and go to
+<tt>https://bank.kyctest.taler.net</tt>, register a new account,
+and start a withdrawal:
+<img src="/images/ios-screenshot-2024-08-27-01.png" alt="iOS screenshots to start withdrawal">
+</p>
+<p>
+Next, we authorize at the bank by tapping the “Transfer” button. Go back to the Wallet app with the top left “back button” named “Taler Wallet” (seen in the leftmost screenshot), and find that the withdraw transaction is still pending, since it requires a (standard) KYC (1st withdrawal):
+<img src="/images/ios-screenshot-2024-08-27-02.png" alt="iOS screenshots to see KYC pending">
+<p>
+Here we can now tap on the “Open KYC website” button, Fill in the form, and the withdrawal succeeds:
+<img src="/images/ios-screenshot-2024-08-27-03.png" alt="iOS screenshots to perform KYC process">
+</p>
+<p>
+To trigger the second KYC process, we go back to the bank and withdraw another 55 KYCS:
+<img src="/images/ios-screenshot-2024-08-27-04.png" alt="iOS screenshots to withdraw more cash">
+</p>
+<p>
+After authorization this again leads to a pending withdrawal transaction:
+<img src="/images/ios-screenshot-2024-08-27-05.png" alt="iOS screenshots resulting in pending transaction">
+</p>
+<p>
+This can again be resolved by following the KYC procedure:
+<img src="/images/ios-screenshot-2024-08-27-06.png" alt="iOS screenshots of second KYC procedure">
+</p>
+<p>
+We again submit the form, and the wallet withdraws the amount:
+<img src="/images/ios-screenshot-2024-08-27-06.png" alt="iOS screenshots of final withdrawal">
+</p>
+
<h4>Download links</h4>
<p>
The wallet has its own download site <a
