从最初的设想到获得 SOC2 认证和 TSA 信任：一款移动驾驶执照应用程序如何变成登机牌.pdf

1、Taking a Product from Napkin to SOC2 Certified&TSA TrustedHow a Mobile Drivers License App Became a Boarding PassFall 2025https:/duffy.devWho Am I?2Background in development,architecture,mathematics,team leadership,marketing,and strategyIf youve:Made an Interac purchaseBought a lottery ticketVisited

2、 a hospitalUsed your passport at a borderyouve likely used my workLed security and development for systems protecting hundreds of millions across 80+countriesPassionate about deep researchrecognized by OCIPEP for outstanding work in secure networksLed teams behind industry firsts:First high-security

3、 ePassportFirst drivers license with printed digital signatureFirst public Mobile Drivers Licensehttps:/duffy.dev3Founded 1897-CBN is an Ottawa-based CompanyWe deliver secure solutions for Payment,Identity,and Lottery markets worldwide.Our team:2200 employees worldwide across 16 countries including

4、Canada,US,and Europe.Our reach:80 countries,millions of daily users,and systems with 50,000+active nodes.Our users:citizens,technical teams,frontline staff,and plant operations.Our capabilities:Firmware&cryptographyBiometrics&penetration testingClassified network security&malware analysisManufacturi

5、ng systems&physical product designDigital printing,RF,and optical technologiesAgendaCompany Confidential|Copyright 2025 Canadian Bank Note Company,Limited41.Overview2.Pilot3.Standardizing for Rollout4.Certifying1.Scorecard2.ISO/SOC3.Pipeline4.Threat Modelling5.TSA approval and ConclusionsCompany Con

6、fidential|Copyright 2025 Canadian Bank Note Company,Limited5Security Response:Mobile Drivers License(MDL/MiD)2025Enterprise-Grade Cloud InfrastructurePrimary Hosting:Secure datacenter with direct DMV integrationMicrosoft Azure Disaster Recovery:Full disaster recovery environment deployed as Software