SCD.json

{
    "$schema": "http://json-schema.org/draft-04/schema#",
    "title": "Operando Self-Compliance Document",
    "description": "To describe and validate Operando certified applications self-compliance documents",
    "type": "object",
    "properties": {
    "appIconURL": {
        "type": "string",
            "description": "A valid url which points to the application's icon"
    },

    "bundleId": {
        "description": "A string which uniquely identifies the app",
            "type": "string"
    },
    "title": {
        "description": "The title of the app, as it will be displayed in Operando",
            "type": "string"
    },

    "accessedHosts": {
        "description": "The list of URLS that the app will access",
            "type": "array",
            "items": {
            "type": "string"
        }
    },
    "accessedInputs": {
        "description": "The list of items describing the accessed sensors and their security level",
            "type": "array",
            "items": {
            "description": "An object describing a sensor used by the application and it's security level",
                "type": "object",
                "properties": {
                "inputType": {
                    "description": "A string describing the sensor type.",
                        "type": "string",
                        "enum": ["loc", "mic", "cam", "gyro", "acc", "prox", "touchID", "bar", "force", "pedo", "magneto",
                        "contacts", "bat"]
                },

                "privacyDescription": {
                    "properties": {
                        "privacyLevel": {
                            "description": "An integer describing the privacy level (which indicates how the data collected from this senser is being used. Corresponding to PL{i}",
                                "type": "integer",
                                "minimum": 1,
                                "maximum": 6
                        },
                        "thirdParties": {
                            "type": "array",
                                "items": {
                                "description": "An object describing the third party to which data from this sensor is sent to.",
                                    "type": "object",
                                    "properties": {
                                    "name": {
                                        "description": "The third party identifier",
                                            "type": "string"
                                    },
                                    "url": {
                                        "description": "The url endpoint at which data from this sensor is sent",
                                            "type": "string"
                                    }
                                },

                                "required": ["name", "url"]


                            }
                        }
                    },
                    "oneOf": [
                        {
                            "type": "object",
                            "properties": {
                                "privacyLevel": { "enum": [1,2,3,4,6] }
                            },
                            "required": ["privacyLevel"]
                        },
                        {
                            "type": "object",
                            "properties": {
                                "privacyLevel":  { "enum": [5] }
                            },
                            "required": ["privacyLevel", "thirdParties"]
                        }
                    ]

                },

                "accessFrequency": {
                    "description": "A string specifying how often the data from this sensor if fetched/queried.",
                        "enum": ["continuously", "continuousIntervals", "singularSample"]
                },

                "userControl": {
                    "type" : "boolean",
                        "description": "A boolean which indicates whether the user can control if or when the the data is being collected"
                },

                "permissionsApi":{
                    "usb":["getDevices","openDevices","findDevices","getConfiguration"],
                        "socket":"*",
                        "management":["getAll","onInstalled","onUninstalled","onEnabled","onDisabled"]
                }

            },
            "required": ["inputType", "privacyDescription", "accessFrequency", "userControl"]
        }
    }
},

    "required": ["accessedInputs", "accessedHosts", "bundleId", "title"]
}