First Published on 22nd March, 2021
Ai Editorial: As immunity/ vaccine credential programs gain momentum, it is also imperative to focus on trust, security and privacy and combat fraud, writes Ai’s Ritesh Gupta
The concept of having a Covid-19 passport or vaccine passport is being explored as a way to support verification of health/ immunity credentials and facilitate travel at this juncture.
The meaning and implications of having a digital vaccination certificate, which essentially is a document and not really a passport, is being elaborated upon. There are several such initiatives of this sort that are being explored at this juncture.
As the IATA states, the significance of an initiative like the #IATATravelPass in re-starting international aviation cannot be overstated. The way it worked during a recent trial flight – let a passenger set up a digital version of their passport on their mobile device, then input their flight details to learn of travel restrictions and requirements, and eventually receive verified test results and a confirmation that they meet all the requisite travel requirements. Digital health credentials are being seen as a prudent way to comply with the new requirements for travel.
Last week the European Commission presented a proposal to create a Digital Green Certificate to facilitate the safe free movement of citizens within the EU during the COVID-19 pandemic. Digital Green Certificates will be valid in all EU Member States.
Being aware of potential fraud
At the same time there is a concern that is related to fraud.
For instance, gaining vaccine certification by dubious means (as it has emerged, arrests have already been made for forged COVID-19 test proof).
Another critical aspect is failing to keep identities secure. It is clear that any Covid-19 passport or immunity/ vaccine credential program must be based on a foundation of trust.
Shielding data and privacy
Some of the important steps being taken today:
- Encouraging not to share details on social media: For their part, those who get vaccinated shouldn’t post a photo of their vaccine card on social media. Authorities are already highlighting that such people are putting themselves at risk of falling victim to scams.
- Devising ways to keep it safe: In the U. K., the Mvine-iProov passport enables a person’s test result or vaccination status to be registered and proved without disclosing their identity. The plan is to complete two trials by March.
- Authentication: Another important feature is going to be the use of digital signatures. Also, counting on multi-factor authentication is going to be vital.
- Detection: How to rely on adaptive risk-based authentication for the same?
- Wide recognition: Maximizing the use of such program via inoperability
Upcoming Webinar
The Loyalty Security Association (LSA) is organizing a free webinar, COVID-19 Passports- A Fraudster’s Treasure Trove?, on Tuesday 30th of March at 10am Eastern.
Details and free registration are here:
https://loyaltysecurityassociation.com/events/upcoming-events/mar-2021-panel/
