Scaling Verify with Wallet for Identity Verification at Uber

This post details the scaling of Uber's integration with Apple's Verify with Wallet API. It elaborates on the architectural challenges of supporting diverse identity verification needs across multiple Uber apps and marketplace segments, emphasizing the need for a flexible yet strict platform. Key technical contributions include the development of a platform-agnostic mapping layer to translate internal identity models to PassKit objects, robust server-side validation of cryptographic elements (MSO verification, device binding, issuer certificate validation) based on ISO/IEC 18013-5, and a resilient strategy for managing the rotation of IACA certificates to maintain a consistent root of trust. The post also highlights the use of HPKE for secure data transit and CBOR for efficient payload encoding, along with the importance of session transcripts to prevent replay attacks. Future directions include supporting new digital document types and cross-platform compatibility with global identity solutions.