Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

US Covid19 Immunization Credentials Privacy friendly QR Codes for Iden

Christian Paquin

PrivacyTalks20 minIntermediateOpen on YouTube ↗

Where

Talks
ShmooCon 2023

Duration

20 min

Presents privacy-friendly QR code designs for verifiable US Covid-19 immunization credentials.

Summary

The talk looks at how proof of COVID-19 immunization can be carried in a QR code in the United States while revealing as little personal information as possible. It frames the core problem as a tension: a verifier needs to confirm that a credential is genuine and that the holder has been vaccinated, but the code should not expose more about the person than that check requires.

The middle of the talk moves to the credential design itself, including how the data is structured and encoded into a QR code so it can be scanned and checked. The speaker draws on earlier research on digital credentials and refers to a published paper and a framework that inform the approach. The emphasis stays on the privacy goals behind the design rather than on any single implementation detail.

For practitioners, the main takeaway is that health credentials can be designed for everyday verification with data minimisation built in from the start. Anyone working on identity, health data or verifiable credentials can use the talk as a starting point for thinking about what a checker needs to learn and what it should never learn.

Related talks