One moment please...
 
 
Exact Globe   
 

Product Updates 420 and 419: Fraud prevention headers improved for MTD (UK legislation)

The specification for the fraud prevention header has been improved to comply with the latest UK fraud prevention policy.

The improvements that have been made to the headers are as follows:

Header

Description

Example value

Gov-Client-Connection-Method

This header displays the string that represents the connection method that is used for the request.

DESKTOP_APP_DIRECT

Gov-Client-Device-ID

This header displays the unique identifier of an originating device. Its value will now also contain the computer system product UUID.

35760BC8-E17E-11E6-B142-1AB8BE0CE08C A341DDA6-6F0F-4DF1-8EA0-9BFFC2CF465D

Gov-Client-User-IDs

This header displays the key-value data structure that contains the user identifiers. The value will display the username of the computer that is used for the request.

os=My-Domain%5CTest123

Gov-Client-Timezone

This header displays the local time zone of the originating device.

UTC+08:00

Gov-Client-Local-IPs

This header displays a list of all local IP addresses (IPv4 and IPv6) that are available to the originating device.

10.200.100.43

Gov-Client-Screens

This header displays the information related to the screens of the originating device.

width=1920&height=1080&scaling-factor=1&colour-depth=32

Gov-Client-Window-Size

This header displays the number of pixels of the window of the originating device from which the API call to HRMC is being initiated.

width=1290&height=642

Gov-Client-User-Agent

This header displays the operating system family, version, device manufacturer, and model of the originating device.

Windows/Microsoft%20Windows%2010%20Enterprise%2010.0.17763 (HP/HP%20ZBook%2015%20G3)

Gov-Client-Multi-Factor

This header displays a list of key-value data structure that contains details of the multi-factor authentication (MFA) statuses related to the API call.

A blank value will be sent for this header as Exact Globe Next uses single-factor authentication.

Gov-Vendor-Version

This header displays the key-value data structure of the software versions that are involved during the request handling.

Exact%20Globe%20Next=4.0.0.build417.20190228

Gov-Vendor-License-IDs

This header displays the key-value data structure of the hashed license keys relating to the vendor software, from which the API request is being initiated.

Exact%20Globe%20Next=2574565%3A10%3A009

Gov-Client-MAC-Addresses

This header displays the list of MAC addresses available on the originating device.

00%3A05%3A9A%3A3C%3A7A%3A00,CE%3ABA%3A14%3AB0%3AF7%3A21,
00%3A50%3A56%3AC0%3A00%3A01,00%3A50%3A56%3AC0%3A00%3A08

For more information, see https://developer.service.hmrc.gov.uk/api-documentation/docs/fraud-prevention, and Product Updates 418, 417, and 416: Making Tax Digital (MTD) supported for VAT return submission (UK legislation).

     
 Main Category: Attachments & notes  Document Type: Release notes detail
 Category:  Security  level: All - 0
 Sub category:  Document ID: 29.468.023
 Assortment:  Date: 12-05-2020
 Release:  Attachment:
 Disclaimer