CMMI Institute

« Appraisal Overview

Beijing Certificate Authority Co., Ltd. (北京数字认证股份有限公司)

R&D Center (研发中心)

Appraisal Details

Organization

Beijing Certificate Authority Co., Ltd. (北京数字认证股份有限公司)

Organizational Unit

R&D Center (研发中心)

Appraisal Team Leader

Louis Poulin

Partner

GRafP Technologies

Sponsors

Peiru Yuan

Appraisal Type

Benchmark

Last day On-site

2022/04/15

Appraisal Expiration Date

2025/04/15


R&D Center Project Description

Organizational Unit

R&D Center

Model or Model View

CMMI Development V2.0 (CMMI-DEV) without SAM - Maturity Level - 5

Sample Size - People

83%

Sample Size - Projects

80%


Project Name

CM

Project Type

Organizational Project

Project Description

Responsible for providing configuration management and version control to projects and organizational support functions.

Number of People

1

Location

Beijing, Beijing China

Subgroup


Project Name

QA

Project Type

Organizational Project

Project Description

Responsible for providing process quality assurance to projects and organizational support functions.

Number of People

1

Location

Beijing, Beijing China

Subgroup


Project Name

Process Engineering

Project Type

Organizational Project

Project Description

Responsible for providing process definition, deployment, and quantitative and performance analyses to projects and organizational support functions.

Number of People

2

Location

Beijing, Beijing China

Subgroup


Project Name

Training

Project Type

Organizational Project

Project Description

Responsible for coordinating and delivering training to projects and organizational support functions.

Number of People

1

Location

Beijing, Beijing China

Subgroup


Project Name

P1

Project Type

OU Project

Project Description

The system takes user identity management as the core and strengthens the security access mechanism of multiple applications with B/S, C/S, mobile app and other structures. It integrates identity management, identity authentication, authorization management, application resource access control and security audit. It is a basic security service platform for application integration, centralized management and security protection of multi-information resources.

Number of People

7

Location

Beijing, Beijing China

Subgroup

Subgroup 2


Project Name

P2

Project Type

OU Project

Project Description

The project uses PKI technology and image technology, combines traditional seal with electronic signature technology, and signs and seals electronic documents. It can be used to identify the signer of electronic documents, protect the integrity of documents, prevent illegal tampering of documents, ensure the non-repudiation of signature behavior, and manages the visual display of digital signatures.

Number of People

6

Location

Beijing, Beijing China

Subgroup

Subgroup 1


Project Name

P3

Project Type

OU Project

Project Description

The system adopts the micro-service technical framework and follows the standard specifications such as certificate authentication system password and related security technical specifications, identity authentication system password protocol specifications and so on. The product can issue digital certificates to enterprises, individuals, equipment and other entities, provides two-factor authentication and ensures the identity security of entities. In addition, the product provides an open API interface, which can be customized for customers and quickly integrated with the business system.

Number of People

8

Location

Beijing, Beijing China

Subgroup

Subgroup 2


Project Name

P4

Project Type

OU Project

Project Description

The project is a software and hardware integrated security device that can provide digital signature and verification services for various application systems. Based on digital certificate, encryption and decryption and other security protection, this product effectively addresses the security challenges such as authenticity, integrity and non-repudiation of online transactions and shared information.

Number of People

6

Location

Beijing, Beijing China

Subgroup

Subgroup 1


Project Name

P5

Project Type

OU Project

Project Description

The system takes digital signature as the core to realize the online signature of individuals, enterprises and other subjects through B/S, H5 and app, so as to reduce the cost of document printing, sending and storage. The system is a signing platform integrating identity authentication, certificate management, seal management, document management, authorization management and application management.

Number of People

6

Location

Beijing, Beijing China

Subgroup

Subgroup 1


Project Name

P6

Project Type

OU Project

Project Description

The product adopts digital signature and time-stamp cryptography technology to solidify the content and formation time of various electronic data in time, so as to ensure the integrity and time attribute of electronic data. When obtaining evidence, it verifies relevant information through the time-stamp and summary data consolidated during solidification, so as to ensure the evidence effectiveness of electronic data in judicial services.

Number of People

6

Location

Beijing, Beijing China

Subgroup

Subgroup 1


OU Description

The R&D Center develops online trust and digital security software products for Beijing Digital Certification Co., Ltd. The products developed by the R&D Center are applied to network trust services, digital asset protection, and network security services with cryptographic technology as the core. Customers include government organizations and private enterprises in the fields of medical treatment, finance, education, transportation, and telecommunications. The appraisal scope consisted of projects started in or after August 2021 and completed or in progress by February 2022.

Relevant Sampling Factors

Customer: Work performed for government and private enterprise customers

Sampling Factor Values

Private enterprise: Work performed for private enterprise customers

Government: Work performed for government customers

Subgroups

Subgroup 1

Subgroup 2


Model View

CMMI Development V2.0 (CMMI-DEV) without SAM

Maturity Level

5
CAR
Satisfied
CM
Satisfied
DAR
Satisfied
EST
Satisfied
GOV
Satisfied
II
Satisfied
MC
Satisfied
MPM
Satisfied
OT
Satisfied
PAD
Satisfied
PCM
Satisfied
PI
Satisfied
PLAN
Satisfied
PQA
Satisfied
PR
Satisfied
RDM
Satisfied
RSK
Satisfied
TS
Satisfied
VV
Satisfied