
Scaling Verify with Wallet for Identity Verification at Uber
6/23/2026
Uber integrated Apple's Verify with Wallet API into its Identity Verification Platform. This involved building a platform-agnostic mapping layer to translate internal identity models to PassKit objects, implementing high-assurance cryptographic validations per ISO/IEC 18013-5, and establishing a mechanism for managing rotating trust anchors (IACA certificates). The Identity Verification Service orchestrates requests server-side, ensuring use-case-specific data scoping. Data is decrypted using HPKE, validated via MSO verification, device binding, and issuer certificate checks, and bound to transactions using a session transcript to prevent replay attacks. The system maintains a registry of IACA certificates, supporting multiple active certificates per jurisdiction for seamless key rotations.