How to provide The Computer Software Copyright Certificate in China - huawei-mobile-services

I recently published the application to Huawei Appgallery. Outside China approved. But in mainland China it was rejected. they asked me to provide The Computer Software Copyright Certificate.
How to i have The Computer Software Copyright Certificate to provide huawei appgallery?
All email information Huawei Appgallery sent is as follows:
Dear developer,
Thank you for contacting us!!
Your app failed the review. The detailed description and modification suggestions are as follows:
Detailed description: Your app failed the review due to lack of qualification documents for AV entertainment-music apps.
Modification suggestion: The Computer Software Copyright Certificate or APP Electronic Copyright Certificate must be provided for the audio-visual entertainment-music category.
For details about the copyright qualification review requirements, see https://developer.huawei.com/consumer/en/doc/distribution/app/30215
Your app did not provide the qualifications needed in Mainland China, the publishing in Mainland China and other countries or regions you have chosen to publish has been affected.
For specific qualifications,
Please refer to: https://developer.huawei.com/consumer/en/doc/30215
[Description]: We found that there is no related privacy statement in your app. The publishing in Mainland China and other countries or regions you have chosen to publish has been affected until all the requirements above are met. For more information, please refer to the rule 7.1 of "AppGallery Review Guidelines": https://developer.huawei.com/consumer/en/doc/distribution/app/50104
[Suggestion]: Please provide related privacy statement in your app.

In China, Computer software copyright (SCC) refers to the exclusive rights enjoyed by software developers in accordance with the copyright laws and is used to prove and protect the copyright of your mobile app. On the one hand, it’s a necessary certificate for some categories of apps, because it can prove the ownership of the app to the Chinese app stores. On the other hand, it can prevent your code from plagiarizing or pirating and is an important proof of app infringement.
Where to apply for Software Copyright Certificate?
The State Copyright Administration is in charge of the registration of the certificate in China, you can apply for it on the website of China Protection Center of China (http://www.ccopyright.com.cn/). And the applicant may register the computer software copyright by yourself self or entrust an agency to register the copyright.
List the detailed process for obtaining Software Copyright Certificate
For individual registering, the process can be divided into five phases: Fill in the application form → submit the application documents → accept the application → examination → to obtain the registration certificate; If you have an agent to help you, just provide the materials directly to the institution, and they will handle the application for you.
What materials are required to register a Software Copyright Certificate?
The application documents for software copyright registration shall include:
Ø Application form for software copyright registration;
Ø Software identification materials;
Ø Identity certificate of the applicant;
Ø Identity certificate of the contact person;
Once you got that,You may upload it directly in console-App service-AppGallery Connect-my apps-select your app-version information-copyright information--upload certificates -resubmit your app for review.
For more detail about the Computer software copyright, please send an email to gochina#huawei.com.
And you can also refer this link to get The Complete Guide to Software Copyright Certificates in China.

It's not possible to release apps on mainland china for indie developer. It should be clearly stated that china blocks foreign software developers so we don't waste time on this.

Related

Can US based company publish on Huawei AppGallery?

I have been researching online but I cannot find a clear statement. Is a US-based company allowed to publish apps on Huawei App Store or does the ban forbid it?
The following table describes whether the services of registration, identity verification, Merchant Service, Payment Service, and Account Service are supported in each country or region for enterprise developers. A check (√) indicates that the service is supported.
We can see that Huawei does not ban forbid on US-based company enterprise developers. US enterprises support account registration, which means they can release applications.
For details about the application release process and specifications, see:
Official website.
Creating an App.
Copyright Qualification Review Requirements.
Sure you can if you get Copyright Certificate in china. But how to do that ? Well probably best would be to pay some chinese company for that so they basically will have copyright registered on them, otherwise looks like not so easy, because of great bureaucratic wall of China.
This is good guide that actually explains it quickly:
Can I get a Software Copyright Certificate if I’m not a Chinese company?
Yes, the copyright owner can be a foreign company or legal person, but
you must submit the legal proof certified by the local Chinese
consulate or notarized by the local notary office.
So basically you can and cannot, means that you cannot on your own, you need someone from china to help you. I believe that was their intention to make it more difficult for foreigners and more profitable for china businesses. And also let's not forget number of other special rules you have to obey in terms of app user interface and functionality to be accepted on mainland China.
https://medium.com/huawei-developers/the-ultimate-guide-to-register-software-copyright-certificates-in-china-45571448fc9f

Facebook Data Security Policy

Recently I've received this email from Facebook about one of my apps after Data Security Checkup:
In working to create a great Platform experience for everyone, we ask developers to ensure the apps they build comply with our Platform Terms and Developer Policies. Your app APPNAME (AppId: **************) doesn't comply with the following:
Platform Terms 6.a.i.1: You must always have in effect and maintain administrative, physical, and technical safeguards that do the following: Meet or exceed industry standards given the sensitivity of the Platform Data
Please make the requested changes by 2021-11-23 at 12:00 PST.
Platform Terms 6.a.i.1 follows to Developer Data Security Best Practices Page and looks like industry standard.
My app uses Facebook Login with only read permissions for public data, like Instagram posts and comments. No any publishing or management.
What exactly Facebook expecting from me as single developer to update in my app? I have vps on Digital Ocean with server management via Serverpilot with all latest security updates etc. My host protected with CloudFlare Business Plan. I've provided all this info already but receiving bot/automated messages like this and have no idea what to do next. Please help?!

Email about IPN certificate upgrade: Is it legit?

A few days ago, I received the following email from address paypal#paypal.com and with subject "IMMEDIATE ATTENTION REQUIRED: PayPal service upgrades.".
I have reason to believe it is a phishing attempt. Please find my notes in the end and try to justify why I'm right or wrong.
The only part of the mail that I removed was my name in the third line.
PayPal service upgrades.
,
As we have previously communicated to you, PayPal is upgrading the
certificate for www.paypal.com to SHA-256. This endpoint is also used
by merchants using the Instant Payment Notification (IPN) product.
This upgrade is scheduled for 9/30/2015; however, we may need to
change this date on short notice to you to align to the industry
security standard.
You’re receiving this notification because you’ve been identified as a
merchant who has used IPN endpoints within the past year. If you have
not made the necessary changes, we urge you to do so right away to
avoid a disruption of your service!
Because these changes are technical in nature, we advise that you
consult with your individuals responsible for your PayPal integration.
They will be able to identify what, if any, changes are needed. Please
share this email and the hyperlinks below with your technical contact
for evaluation.
Testing in the Sandbox is one of the best ways to make sure your
integration works. Sandbox endpoints have been upgraded to accept
secure connections by the SHA-256 Certificates.
Full technical details can be found in our Merchant Security System
Upgrade Guide. In addition, our 2015-2016 SSL Certificate Change
microsite contains a schedule of our service upgrade plan.
Thanks for your patience as we continue to improve our services.
Please do not reply to this email. We are unable to respond to
inquiries sent to this address. For immediate answers to your
questions, visit our Help Center by clicking "Help" on any PayPal
page. Copyright © 2014 PayPal. All rights reserved. PayPal (Europe)
S.á r.l. et Cie, S.C.A., Société en Commandite par Actions. Registered
office: 22-24 Boulevard Royal, L-2449, Luxembourg, R.C.S. Luxembourg B
118 349.
Here's why I think it's fake:
They just address the customer by name, no "Dear" etc.
Copyright 2014? strange...
The phrase "we may need to change this date on short notice to you to align to the industry security standard" has a minor mistake (IMO, although I'm not a native English speaker) and doesn't sound like a company's policy. Talking about maybe changing a date is not professional.
The subject... come on, caps?
The links are to a strange domain, the certificate of which is issued by a different company than paypal.com's. One serves a pdf.
I think it's a pretty elaborate phishing attempt, but it strikes me that in online discussions about it (dating back many months), representatives of various companies treat it as legit.
So, am I missing something?
Yes that is a Legitimate email from PayPal.
For additional details, see this recent Stack Question:
How can I tell if my paypal certificate is SHA-256?
The PayPal Merchant Technical Support Site has additional information on the Certificate Upgrade and how to test your server.
Also if you ever wonder if an email is from PayPal you can forward the email to Spoof#paypal.com or the new email Review#paypal.com.

Enterprise Developer account or Standard Developer account?

We're developing an iPad application for a client, who wishes to distribute the application to only those customers who have purchased the license from him for 'x' number of users. For example, if an university buys the license from him for say 50 users/devices or another company may buy the license from him for 100 users/devices. What would be the best way to distribute such an app. After doing some research iv come across 2 ways for this but each with its own hiccups.
1) Distribute it through the App Store with a standard developer license and authenticate the users of the app. Only if the users are authenticated by the server, would they be able to access and use the application. This allows my client to restrict the users to only those who have obtained licenses form him.
But i have heard that Apple would reject such apps that provide only exclusive access to some users and not to all.
2) The other option is the Enterprise Developer account where he would host the apps on his site and the clients who have obtained licenses only can download it. However, I believe that enterprise applications can only be developed for in-house employees. i.e if he has the enterprise account, the app can only be used for his employees as it would work only for the devices authenticated with the unique DUNS number.
Anyone has any workarounds for this? Any help would be much appreciated. Thanks.
The client I have just developed an app for has the requirement for users to login to their service before they can use the app. They place the app in the store with a clear indication a login is required. The app is free to download so no one gets caught paying for something they can't use.
We have just submitted the latest app to the store and are waiting for approval*. When submitting we included a full login for the reviewers to test the app with. This was in the review notes and remains confidential. They have an existing app already approved which works the same way.
As part of the app we also included a demo mode with static content bundled with the app which allowed access to all the functionality but only for that very limited set of data.
The client has the Enterprise programme which allowed us to beta test the app with designated users but that was with the usual 100 device limit (with devices able to be removed at renewal time only). Both the individual developer and the company program are allowed the same number of devices but you want to be able to join the clients team as developer so they should go for the Company program. The client will need to be the Agent for the submission and that is fixed as the first account they sign up with. We're trying to change the agent for our company now and it's not something you can do online you have to send Apple a request. They should then add you as a developer for their program. You can be a member or an admin but only they, as the Agent, will get to sign the app for distribution.
I sure hope you aren't correct about rejection because of the login service or I'm going to have a very disappointed client on my hands.
*EDIT: Our application was approved by Apple at the first attempt so there was no problem with this approach.

Apple's verification of documents...What they are asking about?

I want to register as an IPhone developer(company;s account) so i followed all steps to create it .... after 3 days i got following mail
(this is full mail)
Dear XXXX,
We are currently in the process of
reviewing your iOS Developer Program
enrollment information. Please fax one
of the following forms of identity for
your business. To assist with this
process, please ensure your business
documents match your enrollment
information.
Fax your submission to +1 (408)
974-1053. Please include your
Enrollment ID XXXXXXXXXX that was
provided to you upon submission.
Please include your main company
corporate telephone number with your
faxed documents.
Registrar of Companies in the state in
which the company is incorporated
Best regards,
Apple Developer Support
I have not understand a line ---- Please fax one of the following forms of identity for your business...what forms they are talking about...
please help
It is a strangely-worded letter, but I'd guess they're asking for your company's Articles of Incorporation as submitted to your state's registrar, or some similar documentation your company has received from your state's registrar indicating your corporate status. Assuming you're in the US.
It seems that you have applied for the enterprise developer license. You would have to submit your company registration documents and post verification of them by Apple, you'd be given the license. The enrollment number is the number that have been given to you when you filled up the form for license.