Vax Passport tip

[Sparki55]

The QR link should be updated on the data center end, with no change to the end-user.

Its actually the data. Your name, birthdate, vaccine record, and signature key. You can't update it via link because it isn't a link. There is absolutely NO network connection required to read or validate it OTHER than downloading the public key.

Gotcha! Didn't realize what a QR code was b4 this exercise. It's just text written in a different language, like a bar code, got it!

Thanks.

[OKkayak]

Its actually the data. Your name, birthdate, vaccine record, and signature key. You can't update it via link because it isn't a link. There is absolutely NO network connection required to read or validate it OTHER than downloading the public key.

Gotcha! Didn't realize what a QR code was b4 this exercise. It's just text written in a different language, like a bar code, got it!

Thanks.

Is that what it is? I thought it was a sort of Rorschach test - been telling everyone I see two bunnies when they ask me for mine

[Even Steven]

So that I don't have to go searching for my passport in my photos on my phone I made it the lock screen photo. (iPhone)

Now all I have to do for quick access is start the phone.

Don't know how often I will need this but it looks like it should work OK.

You can also tattoo it on your butt.

Then when people ask for it you'll have an excuse to show them your butt.

[GordonH]

All this QR code has in it is following:
Your name
Your date of birth
When you got your vaccine shot

So your D/L actually has more info.

[rustled]

You seem to me to be saying that the QR code reader only gives a positive or negative response to the person using it - "yes, fully vaccinated" or "no, not fully vaccinated", along with the person's name and, I see from LordEd's post, their birthdate - funnily enough, the same info that's on the card we already have.

So: If a booster is required in, say, December, the QR code reader will look for an updated version of "yes, fully vaccinated" - perhaps "yes, PLUS" - which means the person with the booster shot will have to replace their wallet card or screen shot.

Is this correct?

This is correct. Again, the reader app is free and available for anyone to download and try out.

I got to wondering if it's possible the QR code you tried it with while you were offline was already stored in "history" or an equivalent.

Could you (or someone else who has downloaded the app) please check for us: if you clear your cache-history-wherever the app might store a QR code on your device for quick retrieval, and then read the QR code, does it still read?

Asking for a friend.

Just kidding. Asking because I'm curious.

[rustled]

All this QR code has in it is following:
Your name
Your date of birth
When you got your vaccine shot

So your D/L actually has more info.

Yup. Still has me wondering why they said the QR code was "necessary because there was too much information on the card we were given with our vaccination".

[LordEd]

Could you (or someone else who has downloaded the app) please check for us: if you clear your cache-history-wherever the app might store a QR code on your device for quick retrieval, and then read the QR code, does it still read?

Asking for a friend.

Just kidding. Asking because I'm curious.

The only thing it needs to download is the public key, so somebody doing the experiment might need to scan one code, go offline, then scan a new one.

[LordEd]

Ok I tried it. First install of app. Scanned nothing. Airplane mode then did a scan. My name came up.

[rustled]

Ok I tried it. First install of app. Scanned nothing. Airplane mode then did a scan. My name came up.

Thanks, LordEd. (Name with vax status and birthdate, I presume?)

[LordEd]

Thanks, LordEd. (Name with vax status and birthdate, I presume?)

Name and vax status only. No birthdate or vax details shown.

[rustled]

Thanks, LordEd. (Name with vax status and birthdate, I presume?)

Name and vax status only. No birthdate or vax details shown.

Ah.

So do those show up if the person scanning is online, or did GordonH's understanding of what's in the QR code viewtopic.php?f=31&t=89663&p=2885315#p2885131 include a couple of items that aren't shown?

[LordEd]

So do those show up if the person scanning is online, or did GordonH's understanding of what's in the QR code include a couple of items that aren't shown?

Online or not doesn't matter. The birthdate and vaccine details are in the QR code, but there's no reason to show those to a business for verification. Perhaps they are included for other uses of the QR. For example international travel or airlines. Other countries want the details of the vaccine type(s) to confirm they meet their own requirements.

[LordEd]

This here is literally the data within the QR code once fully decoded:

viewtopic.php?p=2884800#p2884800

[rustled]

This here is literally the data within the QR code once fully decoded:

viewtopic.php?p=2884800#p2884800

I'm still confused, then - the post you've referenced here says

"You can verify its the right person by checking their picture ID that the name and birthdate match."

but then, when scanning in airplane mode:

"Name and vax status only. No birthdate or vax details shown."

[LordEd]

Break this down a bit

{
"header": { First part of the message. This is not compressed
"alg": "ES256", Signing algorithm. SHA256 with ECDSA (asymmetric key)
"zip": "DEF", Payload is compressed using "deflate" algorithm
"kid": "XCqxdhhS7SWlPqihaUXovM_FjU65WeoBFGc_ppent0Q" Thumbprint of the key
},
"payload": {
"iss": "https://smarthealthcard.phsa.ca/v1/issuer", Issuer URL
"nbf": 1630885634, "not before date". Timestamp in seconds since 1970-01-01
"vc": { Verifiable credentials
"type": [
"https://smarthealth.cards#covid19",
"https://smarthealth.cards#immunization",
"https://smarthealth.cards#health-card"
],
"credentialSubject": {
"fhirVersion": "4.0.1",
"fhirBundle": {
"resourceType": "Bundle",
"type": "collection",
"entry": [
{
"fullUrl": "resource:0",
"resource": {
"resourceType": "Patient",
"name": [
{
"family": "LASTNAME", Name
"given": [
"FIRSTNAME"
]
}
],
"birthDate": "1980-01-01" Birthdate
}
},
{
"fullUrl": "resource:1",
"resource": {
"resourceType": "Immunization",
"status": "completed", Vaccine status
"vaccineCode": {
"coding": [
{
"system": "http://hl7.org/fhir/sid/cvx",
"code": "208"
},
{
"system": "http://snomed.info/sct",
"code": "28581000087106" "SNOMED" number for Pfizer" }
]
},
"patient": {
"reference": "resource:0"
},
"occurrenceDateTime": "2021-05-21", Date/lot of first vaccine
"lotNumber": "EW0199",
"performer": [
{
"actor": {
"display": "Drop-in Vaccine Clinic" Where
}
}
]
}
},
{
"fullUrl": "resource:2", Repeat for second dose
"resource": {
"resourceType": "Immunization",
"status": "completed",
"vaccineCode": {
"coding": [
{
"system": "http://hl7.org/fhir/sid/cvx",
"code": "208"
},
{
"system": "http://snomed.info/sct",
"code": "28581000087106"
}
]
},
"patient": {
"reference": "resource:0"
},
"occurrenceDateTime": "2021-07-25",
"lotNumber": "FD7206",
"performer": [
{
"actor": {
"display": "UBC Vax Van"
}
}
]
}
}
]
}
}
}
},
"verifications": { Footer with the signing information, I think
"trustable": true,
"verifiedBy": "XCqxdhhS7SWlPqihaUXovM_FjU65WeoBFGc_ppent0Q",
"origin": "https://smarthealthcard.phsa.ca/v1/issuer"
}
}