Privacy-First Mobile Applications &
Decentralized Identity Ecosystem
Designing user-facing mobile operating system applications: ClearPAY offline QR payments, ClearSCAN remote PPG optical vitals scanner, MDM Crypto signature whitelisting, privileged platform suite (ClearLIFE), W3C DID identity app (ClearID), and P2P file distribution.
Native Mobile Ecosystems & UX
Consumer and enterprise mobile applications (ClearLIFE, ClearPay) delivering complex cryptography with zero user friction.
Platform-level access to decentralized keys and file storage.
AIDL where any app-developer can use decentralized services with a single line of code.
Mobile Projects & OS Applications
Select any project card below to view its technical sub-page.
ClearPAY Mobile Payments & Wallet
Mobile payment client integrating PayQuicker API (pq), Hyperledger Indy DID wallet, hardware KeyStore signing, and DLT settlement.
ClearSCAN Remote PPG Optical Vitals Scanner
Camera-based optical remote photoplethysmography (rPPG) application extracting real-time blood volume pulse (BVP) waveforms, heart rate, and physiological metrics from facial video.
MDM Crypto & Signature Whitelisting
Mobile Device Management cryptographic library enforcing hardware APK signature validation, TrustZone StrongBox attestation, and package isolation.
ClearLIFE Android Platform Suite
Privileged AOSP platform app (com.clearos.clearlife) serving as the central hub for mobile device privacy, Gateway rules (cleargm), and backups.
ClearID Decentralized Identity App
W3C Decentralized Identifier (DID) app for Android featuring KeyStore hardware biometric encryption, embedded IPFS Lite node, and Aries support.
Data Custodian Privacy & Vault Engine
Permissioned data storage & privacy framework (`datacustodian`) connecting encrypted user data vaults, consent policies, IPFS, and MQTT event buses.
ClearSHARE & StoreWise Storage SDK
Decentralized peer-to-peer file sharing and backup platform. Updateable APEX daemon (`com.clearos.clearshare.apex`) and StoreWise SDK.
ClearSHELL System Launcher
Custom system launcher and UI shell tailored for ClearOS mobile devices, providing application management and elevated system settings integration.
ClearPAY Mobile Payment & Wallet Architecture (clearpay)
Mobile payment application and tokenized wallet client integrating PayQuicker API (pq), Hyperledger Indy DID wallet (indy), Distributed Ledger Technology (dlt), and IPFS storage.
PayQuicker API, Indy DID & DLT Settlement Pipeline
End-to-end tokenized payment execution combining fiat banking APIs with self-sovereign identity proofs and hardware key protection.
PayQuicker, W3C DID Signing & Offline Settlement
Complete mobile financial flow from identity-verified KYC to camera-based offline QR payment settlement.
- ✓PayQuicker REST Client: Implemented comprehensive API client wrapping PayQuicker user registration, identity verification (KYC), account balance retrieval, and bank transfers.
- ✓W3C DID Transaction Signing: Bound all payment authorizations to user Decentralized Identifiers (DIDs) with cryptographic signature validation before dispatch.
- ✓Offline Peer-to-Peer Payments: Built camera-scannable dynamic QR-code exchange protocol enabling zero-connectivity point-of-sale transactions with cryptographic replay protection.
- ✓Distributed Ledger Reconciliation: Integrated DLT settlement client recording verified payment receipts with eventual consistency and multi-signature validation.
- ✓Hardware KeyStore Protection: Secured payment signing keys within Android KeyStore (StrongBox TrustZone) with biometric fingerprint/face authentication.
- ✓Architecture Leadership: Led frontend Kotlin architecture, RPC client implementation, Indy DID cryptographic binding, and security hardening.
ClearSCAN Remote PPG Optical Vitals Scanner (clearscan)
Camera-based optical remote photoplethysmography (rPPG) mobile application extracting real-time blood volume pulse (BVP) waveforms, instantaneous heart rate, HRV, and respiratory metrics directly from smartphone camera video streams.
Optical Facial Signal Extraction & Real-Time PPG Telemetry
Real-time on-device optical signal processing isolating pulsatile capillary flush from ambient noise without cloud dependencies.
- ✓Native Integration: Integrated pre-compiled binaries into Android app.
MDM Crypto & Signature Whitelisting (mdmcrypto)
Mobile Device Management cryptographic library enforcing hardware-backed APK signature validation, package hash verification, and unauthorized binary rejection.
Hardware Attestation & Binary Isolation Engine
Cryptographic operating system fence enforcing strict OEM signature verification and blocking unauthorized side-loaded executables.
- ✓Cryptographic Module Engineering: Designed and authored the MDM Crypto subsystem, establishing hardware security boundaries and execve gating.
- ✓Hardware-Backed Signature Whitelisting: Enforced strict signature validation on all system executables, allowing only OEM-signed binaries to execute under custom AOSP ROM.
- ✓Package Hash & File Integrity Verification: Computed SHA-256 file hashes on system apps during boot to detect unauthorized tampering or side-loaded APK modifications.
- ✓Hardware KeyStore Attestation: Bound app signature verification keys to Android KeyStore hardware attestation certificates to prevent emulator cloning.
- ✓Unauthorized Binary Execution Rejection: Intercepted process execution requests (
execve) via SELinux and daemon checks (cleargm), blocking unsigned binaries. - ✓Enterprise Device Policy Enforcement: Provided MDM administrative interfaces for remotely updating signature whitelist policies over encrypted channels.
ClearLIFE Android Platform Application (com.clearos.clearlife)
The central privileged operating system application for ClearOS mobile devices, orchestrating gateway network rules, device privacy, system backups, and real-time state synchronization.
Central Privacy Hub, Gateway Firewall & Backup Nexus
Privileged system app orchestrating device-wide network firewall policies, privacy score metrics, and peer-to-peer device state backups.
- ✓Central Privileged Operating System Hub: Built the flagship platform app (
com.clearos.clearlife) serving as the main UI for device management. - ✓ClearGM Network Gateway Interface: Created real-time UI dashboard managing firewall rules (
cleargm), per-app domain whitelisting, and netfilter packet statistics. - ✓Privacy & Identity Settings Integration: Integrated W3C Decentralized Identifier (DID) identity management, biometric authentication, and key rotation controls.
- ✓Encrypted System Backup Orchestration: Managed background file backups (
clearsync) and P2P storage allocation across decentralized storage nodes (clearshare). - ✓Elevated System IPC Communication: Communicated with root daemons via elevated IPC pipes (
clearfifo), exposing privileged platform controls to device owners. - ✓Custom Modern Android UI/UX: Designed responsive glassmorphism UI using Jetpack Compose, custom animations, and dark-mode themes optimized for mobile displays.
ClearID Android Application & W3C Identifiers (com.clearid)
Self-sovereign identity mobile application implementing W3C Decentralized Identifiers (DIDs), Android KeyStore biometric hardware protection, embedded IPFS Lite node, and Hyperledger Aries verifiable credentials.
- ✓W3C Decentralized Identifier (DID) Engine: Developed self-sovereign identity app (
com.clearid) implementing W3C DID specifications and cryptographic key pairs. - ✓Android KeyStore Biometric Protection: Protected private keys with hardware biometric authentication (
BiometricPrompt), preventing key extraction even if device is rooted. - ✓Embedded IPFS Lite Node Integration: Integrated an embedded IPFS Lite Go daemon via JNI wrappers for local content-addressed storage of identity credentials.
- ✓Hyperledger Aries Verifiable Credentials: Supported Hyperledger Aries protocols for issuing, holding, and presenting tamper-proof verifiable credentials.
- ✓Offline Credential Presentation: Enabled offline QR-code cryptographic credential verification between physical devices without cloud server round-trips.
- ✓Cross-App Identity Binder Service: Exposed system AIDL Binder services (
IClearIdentityService.aidl) allowing authorized local apps to request identity verification.
Data Custodian Privacy Framework (datacustodian)
Permissioned data custody and privacy middleware engine facilitating encrypted user data vaults, access control consent policies, IPFS storage, and MQTT event buses.
- ✓Permissioned Data Custody Architecture: Designed middleware engine (
datacustodian) establishing secure data vaults for user personal information and sensor logs. - ✓Cryptographic Consent Policy Rules: Enforced granular access control policies requiring explicit user consent signatures before granting third-party app data access.
- ✓Encrypted IPFS Storage Backing: Encrypted stored data payload objects with AES-256-GCM before pushing content-addressed hashes to local IPFS storage nodes.
- ✓Real-Time MQTT Event Bus: Integrated lightweight MQTT event broker for broadcasting privacy consent updates and access revocation signals across local daemons.
- ✓Zero-Knowledge Data Access Auditing: Maintained an immutable local audit log tracking every data access request, timestamp, caller UID, and consent state.
- ✓Data Minimization & Anonymization Engine: Built automated pipeline filtering PII (Personally Identifiable Information) before transmitting anonymized telemetry streams.
ClearSHELL System Launcher
Custom system launcher and UI shell tailored for ClearOS mobile devices, providing application management and elevated system settings integration.
ClearSHELL Home Interface & Privacy Application Ecosystem
Native mobile interface delivering de-Googled privacy apps (ClearID, ClearSCAN, ClearMED, ClearHEALTH) with sandboxed application governance.
- ✓Custom System Launcher & Home UI: Engineered custom AOSP system launcher (
ClearSHELL) serving as the primary home screen and app drawer for ClearOS devices. - ✓Elevated System Settings Integration: Integrated deep operating system settings directly into the launcher UI, including SEPolicy status and netfilter controls.
- ✓Custom Application Drawer & Categorization: Implemented dynamic app categorization, search indexing, and security status indicators for installed APKs.
- ✓Privileged Intent & Window Management: Utilized system-privilege APIs for managing system windows, status bar overlays, and lockscreen security states.
- ✓Smooth Micro-Animations & Gesture Controls: Built modern gesture-driven navigation (swipe-to-search, home gestures) with 60 FPS hardware-accelerated animations.
- ✓De-Googled Search & Widget Framework: Replaced Google Search bar with privacy-preserving local search and open-source widget hosting engines.