9月2日 的 TWDIW 應用程式分析

TWDIW is like a digital version of a physical wallet. Users can freely store various credentials or cards in the TWDIW app on their mobile devices. When identity verification is required, users do not need to carry physical credentials or cards; instead, they can use the TWDIW app on their mobile devices to choose which credential or card to present to third parties for identity verification and authorize access to specific identity data. From traditional physical identification to electronic forms, and now to digital identity integrated with mobile devices, the TWDIW app serves as a digital public infrastructure. It can store not only government-issued credentials, but also diplomas and other academic documents issued by schools, employee IDs and membership cards issued by enterprises, professional language certificates, and transit cards. In the future, more items can also be added to the TWDIW app, further expanding its range of applications. In addition, to enhance the transparency and security of the TWDIW app, MODA plans to open the source code for public review in the future. The security of the TWDIW app depends on various factors, including system design, encryption technology, and user behavior. Generally, the TWDIW app provides a relatively secure environment through multi-factor authentication and biometric verification, users are still advised to regularly update their software and avoid using public Wi-Fi networks for sensitive operations. The TWDIW app adopts the GuardSquare DexGuard solution to protect against static analysis, dynamic analysis, and runtime attacks, thereby preventing malicious exploitation of the TWDIW app. The TWDIW app will pass the third-party Mobile Application Security (MAS) testing (Category L2: User identity authentication) and obtain the certification mark to ensure application security.