Vax Passport tip

[Bsuds]

You are taking a screen shot. No internet connection is required and it isn't 'updated automatically.

Could you please point me to this information (link please)

Is your Google broken? go look it up.

[Bsuds]

Sounds too me as though I could share my QR code with anyone. No?

I know that the Government is telling us not to share them but really, who is going to honor that request?

It would be kind of ironic for an anti vaxxer to use a "borrowed" vax passport.

When scanned it comes up "Vaccinated and your name" That's why you need ID as well.

[Bsuds]

I am curious about this as well because it is a double edged sword. What happens when there is no internet/wifi available. Can't wait to see how they handle 20,000 screaming fans trying to get in at a Metallica concert

I don't think an internet connection is required to read the QR code. Just an app.

[Bsuds]

Apparently the people who deliver recreational programming for seniors are expected to check as their workshop participants enter - the person sharing their expertise on a hobby like gardening or cross stitch or fly-tying needs to know how to use the scanner to check the code. Remains to be seen whether or not the seniors volunteering to lead these workshops will be given the scanners they'll need to do the checks at the door.

No issues at the Rutland Seniors Activity Centre today.

You just need a Tablet and the app to read the codes. Probably can do it with a smart phone too.

[MalaPropina]

You are taking a screen shot. No internet connection is required and it isn't 'updated automatically.

Could you please point me to this information (link please)

It's right on the webpage where you sign up. It saves the screen shot like a photo. No app to download.

[Bsuds]

The QR code contains your data that has been encrypted with a key the scanner will have ... so the name that the scanner pops up has to match the image being scanned, and has to match your photo ID ... the scanner will also show the "issued date" so that can be verified too against the provided image ... similar to how blockchain works all the data has been checksummed and that value is also part of the keyed data which means forging a valid QR code will require someone to have the encryption key, the checksum algorithm and the data format ... who is seriously going to pay to have some hacker figure out all that just to go into a non-essential business/event in this single province?

So the digital image and the printed version will be more or less secure from being hacked/copied ... and no, the scanner won't necessarily need to have an active internet connection (for those worried about the tracking aspect) ...

Without an internet connection, the app would have to store all of the user's QR codes on the scanning device. This number would be in the millions. I doubt that they are stored locally.

Edit: Just read it again and I'm guessing that you mean the end-users (and not the scanners) don't require an internet connection.

It's a QR code! A digital way to hold information. No different than the card they gave you in digital form.
It's just more secure! The app just reads it and translates it to something we can understand!

"The three most common uses of QR Codes (2D mobile barcodes) are:

1. To open a link of a website
2. To dial a telephone number
3. To display a message"

[LordEd]

I would think that the QR code would be "revolving" so the information is always updated and the old QR code would be invalid. This way when they change the requirement to have a vax passport, the information will always be up to date. This would reduce the amount of fraud. Surely they have thought of that... or not.

Thought I escaped from posting here with some time off...

The QR Code contains a numeric string starting with "shc:/". Its encoded in a way to include a header, payload, and verification. The payload is compressed.

Here's a sample of the data: (from here https://dunae.ca/notes/2021/09/08/bc-va ... ormat.html)

Code: Select all

{
    "header": {
        "alg": "ES256",
        "zip": "DEF",
        "kid": "XCqxdhhS7SWlPqihaUXovM_FjU65WeoBFGc_ppent0Q"
    },
    "payload": {
        "iss": "https://smarthealthcard.phsa.ca/v1/issuer",
        "nbf": 1630885634,
        "vc": {
            "type": [
                "https://smarthealth.cards#covid19",
                "https://smarthealth.cards#immunization",
                "https://smarthealth.cards#health-card"
            ],
            "credentialSubject": {
                "fhirVersion": "4.0.1",
                "fhirBundle": {
                    "resourceType": "Bundle",
                    "type": "collection",
                    "entry": [
                        {
                            "fullUrl": "resource:0",
                            "resource": {
                                "resourceType": "Patient",
                                "name": [
                                    {
                                        "family": "LASTNAME",
                                        "given": [
                                            "FIRSTNAME"
                                        ]
                                    }
                                ],
                                "birthDate": "1980-01-01"
                            }
                        },
                        {
                            "fullUrl": "resource:1",
                            "resource": {
                                "resourceType": "Immunization",
                                "status": "completed",
                                "vaccineCode": {
                                    "coding": [
                                        {
                                            "system": "http://hl7.org/fhir/sid/cvx",
                                            "code": "208"
                                        },
                                        {
                                            "system": "http://snomed.info/sct",
                                            "code": "28581000087106"
                                        }
                                    ]
                                },
                                "patient": {
                                    "reference": "resource:0"
                                },
                                "occurrenceDateTime": "2021-05-21",
                                "lotNumber": "EW0199",
                                "performer": [
                                    {
                                        "actor": {
                                            "display": "Drop-in Vaccine Clinic"
                                        }
                                    }
                                ]
                            }
                        },
                        {
                            "fullUrl": "resource:2",
                            "resource": {
                                "resourceType": "Immunization",
                                "status": "completed",
                                "vaccineCode": {
                                    "coding": [
                                        {
                                            "system": "http://hl7.org/fhir/sid/cvx",
                                            "code": "208"
                                        },
                                        {
                                            "system": "http://snomed.info/sct",
                                            "code": "28581000087106"
                                        }
                                    ]
                                },
                                "patient": {
                                    "reference": "resource:0"
                                },
                                "occurrenceDateTime": "2021-07-25",
                                "lotNumber": "FD7206",
                                "performer": [
                                    {
                                        "actor": {
                                            "display": "UBC Vax Van"
                                        }
                                    }
                                ]
                            }
                        }
                    ]
                }
            }
        }
    },
    "verifications": {
        "trustable": true,
        "verifiedBy": "XCqxdhhS7SWlPqihaUXovM_FjU65WeoBFGc_ppent0Q",
        "origin": "https://smarthealthcard.phsa.ca/v1/issuer"
    }
}

Once your 'check' application downloads the public key once, there is no need to communicate with any server as your information is digitally signed. You can't modify the QR because the signature would be invalid.

All of the information needed is in the QR code. No government tracking where you are. Just validating a key.

You can verify its the right person by checking their picture ID that the name and birthdate match.

[spooker]

Without an internet connection, the app would have to store all of the user's QR codes on the scanning device. This number would be in the millions. I doubt that they are stored locally.

Edit: Just read it again and I'm guessing that you mean the end-users (and not the scanners) don't require an internet connection.

Why would the app need to store anything? The government would be over-reaching if they kept track of everywhere you go (that duty falls to the phone providers) ... the verification app just needs to validate your QR code and the person checks it against your DL ... had my first check this morning, nothing to it ...

[Beerhunter341]

Without an internet connection, the app would have to store all of the user's QR codes on the scanning device. This number would be in the millions. I doubt that they are stored locally.

Edit: Just read it again and I'm guessing that you mean the end-users (and not the scanners) don't require an internet connection.

Why would the app need to store anything? The government would be over-reaching if they kept track of everywhere you go (that duty falls to the phone providers) ... the verification app just needs to validate your QR code and the person checks it against your DL ... had my first check this morning, nothing to it ...

And how do you suppose it validates your QR code? It must be checking it against a database somewhere.

[LordEd]

And how do you suppose it validates your QR code? It must be checking it against a database somewhere.

Absolutely not.

The only thing you need to verify is the public key downloaded once. Its a one-way signature. You can only make the signature with the private key that isn't shared.

All the information needed to validate the code is in the card.

[Bsuds]

And how do you suppose it validates your QR code? It must be checking it against a database somewhere.

You are not comprehending how it works. Try doing some research because you don't seem to believe anyone here.

[LordEd]

If you have a passport and want me to decode it for you, post here or in private and I can send the result to you.

Note, you will be sharing your name, birthdate, and 1-2 vaccine dose information.

[Beerhunter341]

And how do you suppose it validates your QR code? It must be checking it against a database somewhere.

You are not comprehending how it works. Try doing some research because you don't seem to believe anyone here.

I thought this forum was here to help.... my mistake

[rustled]

And how do you suppose it validates your QR code? It must be checking it against a database somewhere.

You are not comprehending how it works. Try doing some research because you don't seem to believe anyone here.

Beerhunter is asking the same questions I'm asking. It's not a matter of not believing anyone here, it's a matter of not understanding how it works.

You seem to me to be saying that the QR code reader only gives a positive or negative response to the person using it - "yes, fully vaccinated" or "no, not fully vaccinated", along with the person's name and, I see from LordEd's post, their birthdate - funnily enough, the same info that's on the card we already have.

So: If a booster is required in, say, December, the QR code reader will look for an updated version of "yes, fully vaccinated" - perhaps "yes, PLUS" - which means the person with the booster shot will have to replace their wallet card or screen shot.

Is this correct?

[Sparki55]

So: If a booster is required in, say, December, the QR code reader will look for an updated version of "yes, fully vaccinated" - perhaps "yes, PLUS" - which means the person with the booster shot will have to replace their wallet card or screen shot.

Is this correct?

The way I understand QR codes' is that they are a unique link, such as "www.castenet.com". So if you are updated on the link to have a booster, the QR code navigates to your specific page and reads new information, the same way castent changes the news stories available but not the link.