US Covid19 Immunization Credentials Privacy friendly QR Codes for Iden
Where
Talks
ShmooCon 2023
Duration
20 min
Presents privacy-friendly QR code designs for verifiable US Covid-19 immunization credentials.
Summary
The talk looks at how proof of COVID-19 immunization can be carried in a QR code in the United States while revealing as little personal information as possible. It frames the core problem as a tension: a verifier needs to confirm that a credential is genuine and that the holder has been vaccinated, but the code should not expose more about the person than that check requires.
The middle of the talk moves to the credential design itself, including how the data is structured and encoded into a QR code so it can be scanned and checked. The speaker draws on earlier research on digital credentials and refers to a published paper and a framework that inform the approach. The emphasis stays on the privacy goals behind the design rather than on any single implementation detail.
For practitioners, the main takeaway is that health credentials can be designed for everyday verification with data minimisation built in from the start. Anyone working on identity, health data or verifiable credentials can use the talk as a starting point for thinking about what a checker needs to learn and what it should never learn.
Related talks
Talks·50 min
Greg Newby
Explains how proof of vaccination credentials use signed QR codes and public keys to resist forgery while minimizing disclosed data.
Talks·51 min
Phill Hallam-Baker
Proposes DNS-based identity extensions for portable accounts, secure contact exchange, and internet-connected devices with their own names.
Talks·42 min
Dana Gretton · Jaguar Kristeller
Presents a peer-to-peer model that stores and shares body-worn data across personal devices instead of cloud services.


