GPF Dipendente

GPF Employee is the companion app for GPF Registro Presenze, built for secure and fast employee attendance validation.

Employees scan a QR code generated by the employer to register shift Start or End.
Each scan is validated with Apple CloudKit and signed payload checks before being accepted.

MAIN FEATURES

• QR scanning for attendance Start/End
• Automatic action handling from QR payload
• Signed QR validation (HMAC-based)
• Anti-replay protection (nonce tracking)
• Timestamp validity checks (expired/future requests rejected)
• Clear session status (Not started / In progress / Ended)
• Automatic date/time recording
• Lightweight interface for daily use
• Dedicated “Company” tab with imported company details
• Secure company link import (from GPF Registro Presenze)
• iCloud data management controls (upload/remove synced employee name)

CLOUDKIT INTEGRATION

GPF Employee uses Apple CloudKit only (no third-party backend).

Current integration is split by purpose:

• Public CloudKit DB: attendance request exchange between Employee and Registro Presenze
• Encrypted public envelope records: secure company link import
• iCloud Key-Value Store: employee display name sync on user devices

No third-party servers are used.
An Apple ID is required for iCloud/CloudKit synchronization.

QR VALIDATION LOGIC

1. Employer generates a QR containing company, employee, action, timestamp, nonce, and signature.
2. Employee scans the QR in GPF Employee.
3. App validates payload integrity and submits a CloudKit attendance request.
4. Registro Presenze verifies signature, timestamp window, and nonce uniqueness before processing.

Security controls include:

• Signature verification
• Timestamp window enforcement
• Nonce-based replay prevention
• Hashed share-code material support where applicable

QR codes are used only for attendance validation, never for advertising or tracking.

PRIVACY

• No account registration inside the app
• No ads
• No third-party analytics SDKs
• No ad-tracking
• No sale of personal data

Only minimal operational data is processed for attendance validation and synchronization through Apple infrastructure.

GPF Employee is designed to be secure, focused, and operationally simple, giving employers controlled attendance validation while keeping the employee experience fast and clear.