Digital Travel Credentials - Revision history

Tomjones: /* Results */

2021-05-04T00:52:52Z

Results

← Older revision		Revision as of 00:52, 4 May 2021
Line 90:		Line 90:
	# Biometric matching is done in person by the Agent.		# Biometric matching is done in person by the Agent.
	# Biometric matching is done by the smartphone which can unlock access directly.		# Biometric matching is done by the smartphone which can unlock access directly.
			# [https://journals.sagepub.com/doi/abs/10.1258/135763307781645211 Access to efficient health services for tourists - an evaluation of the economic benefits] shows other places where digital travel creds can be helpful.

	Dependencies:		Dependencies:

Tomjones: /* Context */

2021-03-21T00:04:57Z

Context

← Older revision		Revision as of 00:04, 21 March 2021
Line 5:		Line 5:
	To provide reasonably high assurance that a traveler has the Health and other Credentials needed to travel.		To provide reasonably high assurance that a traveler has the Health and other Credentials needed to travel.
	* This effort is essentially a proposal to replace the [https://www.washingtonpost.com/lifestyle/travel/yellow-card-vaccine-passport/2020/12/30/746c0558-40b7-11eb-8db8-395dedaaa036_story.html Yellow Card or vaccine passports] with [[Digital Travel Credentials]].		* This effort is essentially a proposal to replace the [https://www.washingtonpost.com/lifestyle/travel/yellow-card-vaccine-passport/2020/12/30/746c0558-40b7-11eb-8db8-395dedaaa036_story.html Yellow Card or vaccine passports] with [[Digital Travel Credentials]].
			* See te wiki page
	* The working assumption is that the user would put certificates on their own phone at their own discretion.		* The working assumption is that the user would put certificates on their own phone at their own discretion.
	* The use cases are not dependent on a nation-wide repository, but can work with any regional or even laboratory certified clinical electronic health record (EHR) repository.		* The use cases are not dependent on a nation-wide repository, but can work with any regional or even laboratory certified clinical electronic health record (EHR) repository.

Tomjones: /* References */

2021-03-20T03:33:45Z

References

← Older revision		Revision as of 03:33, 20 March 2021
Line 119:		Line 119:
	==References==		==References==
	* [https://www.icao.int/Meetings/TRIP-Symposium-2019/PublishingImages/Pages/Presentations/Digital%20Travel%20Credentials.pdf Digital Travel Credentials] (2019-06-25) TRIP 15th Symposium Louise Cole		* [https://www.icao.int/Meetings/TRIP-Symposium-2019/PublishingImages/Pages/Presentations/Digital%20Travel%20Credentials.pdf Digital Travel Credentials] (2019-06-25) TRIP 15th Symposium Louise Cole
	* [https://en.wikipedia.org/wiki/International_Certificate_of_Vaccination_or_Prophylaxis Int'l Certificate of Vaccination or Prophylaxis. The Yellow Card.		* [https://en.wikipedia.org/wiki/International_Certificate_of_Vaccination_or_Prophylaxis Int'l Certificate of Vaccination or Prophylaxis]. The Yellow Card.
	* [https://www.nytimes.com/2021/02/06/health/covid-vaccination-card.html Covid Vaccination Scams] from bad actors can overwhelm credential efforts that are not prepared for them.		* [https://www.nytimes.com/2021/02/06/health/covid-vaccination-card.html Covid Vaccination Scams] from bad actors can overwhelm credential efforts that are not prepared for them.
	* [https://www.iata.org/en/pressroom/pr/2021-01-19-01/ Emirates to Become one of the First Airlines Globally to Trial IATA Travel Pass] released 2021-01-19		* [https://www.iata.org/en/pressroom/pr/2021-01-19-01/ Emirates to Become one of the First Airlines Globally to Trial IATA Travel Pass] released 2021-01-19

Tomjones: /* References */

2021-03-20T03:33:21Z

References

← Older revision		Revision as of 03:33, 20 March 2021
Line 119:		Line 119:
	==References==		==References==
	* [https://www.icao.int/Meetings/TRIP-Symposium-2019/PublishingImages/Pages/Presentations/Digital%20Travel%20Credentials.pdf Digital Travel Credentials] (2019-06-25) TRIP 15th Symposium Louise Cole		* [https://www.icao.int/Meetings/TRIP-Symposium-2019/PublishingImages/Pages/Presentations/Digital%20Travel%20Credentials.pdf Digital Travel Credentials] (2019-06-25) TRIP 15th Symposium Louise Cole
			* [https://en.wikipedia.org/wiki/International_Certificate_of_Vaccination_or_Prophylaxis Int'l Certificate of Vaccination or Prophylaxis. The Yellow Card.
	* [https://www.nytimes.com/2021/02/06/health/covid-vaccination-card.html Covid Vaccination Scams] from bad actors can overwhelm credential efforts that are not prepared for them.		* [https://www.nytimes.com/2021/02/06/health/covid-vaccination-card.html Covid Vaccination Scams] from bad actors can overwhelm credential efforts that are not prepared for them.
	* [https://www.iata.org/en/pressroom/pr/2021-01-19-01/ Emirates to Become one of the First Airlines Globally to Trial IATA Travel Pass] released 2021-01-19		* [https://www.iata.org/en/pressroom/pr/2021-01-19-01/ Emirates to Become one of the First Airlines Globally to Trial IATA Travel Pass] released 2021-01-19

Tomjones: /* Open Questions */

2021-02-08T01:49:47Z

Open Questions

← Older revision		Revision as of 01:49, 8 February 2021
Line 109:		Line 109:
	# Who will apply the rules to the lab results and create the card. This may not need to be solved immediately.		# Who will apply the rules to the lab results and create the card. This may not need to be solved immediately.
	# What events should create updates to the card. Changes could be created by changes in scientific knowledge or governmental policy.		# What events should create updates to the card. Changes could be created by changes in scientific knowledge or governmental policy.
	# How would updates be propagated to the card. Perhaps the card needs a very short ~~life time~~, like 24 hours before travel commences.		# How would updates be propagated to the card. Perhaps the card needs a very short lifetime, like 24 hours before travel commences.

	*for SSI geeks, the various lab reports can be viewed as verifiable credentials.		*for SSI geeks, the various lab reports can be viewed as verifiable credentials.

Tomjones: /* Results */

2021-02-08T01:48:50Z

Results

← Older revision		Revision as of 01:48, 8 February 2021
Line 78:		Line 78:
	#Note that the late binding token could be bound to travel supplier as well as needed.		#Note that the late binding token could be bound to travel supplier as well as needed.
	#The identity of the verifier/validator is discoverable by the travel supplier.		#The identity of the verifier/validator is discoverable by the travel supplier.
	#User makes choices on which attributes are trusted for sharing with the travel supplier. (For example the user could have both a vaccination credential as well as a positive lab result.)		#User makes choices on which attributes are trusted for sharing with the travel supplier. (For example, the user could have both a vaccination credential as well as a positive lab result.)

	Post Condition:		Post Condition:
	#If validation accepted, and traveler completes payment, the access to the travel conveyance is granted.		#If validation accepted, and traveler completes payment, the access to the travel conveyance is granted.
	#Note that at the end of the process of validating the traveler's health, the state issued conditions for travel will determine which path to use. The penalty for the travel supplier follow correct verification procedures could result in civil penalties, including loss of use of travel trust registry.		#Note that at the end of the process of validating the traveler's health, the state issued conditions for travel will determine which path to use. The penalty for the travel supplier failing to follow correct verification procedures could result in civil penalties, including loss of use of travel trust registry.

	Examples:		Examples:
	# Late binding token - FIDO U2F token, TEE TPM VSC, etc.		# Late binding token - FIDO U2F token, TEE TPM VSC, etc.
	# Client side code: ~~javascript~~ in a browser, native app, etc.		# Client-side code: JavaScript in a browser, native app, etc.
	# Biometric matching is done in person by the Agent.		# Biometric matching is done in person by the Agent.
	# Biometric matching is done by the smartphone which can unlock access directly.		# Biometric matching is done by the smartphone which can unlock access directly.

Tomjones: /* Scenarios */

2021-02-08T01:46:19Z

Scenarios

← Older revision		Revision as of 01:46, 8 February 2021
Line 37:		Line 37:
	#Traveler has a ticket to ride from a supplier they have not previously used.		#Traveler has a ticket to ride from a supplier they have not previously used.
	#Traveler is informed of the requirement for a Health Travel Credential.		#Traveler is informed of the requirement for a Health Travel Credential.
	#Traveler acquires Credential from a health care provider, for example a lab, which ~~populatetes~~ a record in an EHR.		#Traveler acquires Credential from a health care provider, for example a lab, which populates a record in an EHR.
	#An approved [[Credential Service Provider]] accepts the record from the EHR and creates a Health Credential meeting the criteria of the Trust Registry.		#An approved [[Credential Service Provider]] accepts the record from the EHR and creates a Health Credential meeting the criteria of the Trust Registry.
	#Access Agent asks traveler for a verified claim of Health with a nonce.		#Access Agent asks traveler for a verified claim of Health with a nonce.

Tomjones: /* Open Questions */

2021-02-08T01:42:05Z

Open Questions

← Older revision		Revision as of 01:42, 8 February 2021
Line 106:		Line 106:
	==Open Questions==		==Open Questions==
	The questions that are known so far are:		The questions that are known so far are:
	# ~~what~~ rules will be applied to create a COVID or vax card from the various lab reports		# What rules will be applied to create a COVID or vax card from the various lab reports. Current thinking is a policy framework that can be filled is as governmental rules are changed to adapt to the progress against COVID.
	# ~~who~~ will apply the rules to the lab results and create the card.		# Who will apply the rules to the lab results and create the card. This may not need to be solved immediately.
	# ~~what~~ events should create updates to the card		# What events should create updates to the card. Changes could be created by changes in scientific knowledge or governmental policy.
	# ~~how~~ would updates be propagated to the card.		# How would updates be propagated to the card. Perhaps the card needs a very short life time, like 24 hours before travel commences.

	*for SSI geeks, the various lab reports can be viewed as verifiable credentials.		*for SSI geeks, the various lab reports can be viewed as verifiable credentials.

Tomjones: /* Results */

2021-02-07T22:26:38Z

Results

← Older revision		Revision as of 22:26, 7 February 2021
Line 78:		Line 78:
	#Note that the late binding token could be bound to travel supplier as well as needed.		#Note that the late binding token could be bound to travel supplier as well as needed.
	#The identity of the verifier/validator is discoverable by the travel supplier.		#The identity of the verifier/validator is discoverable by the travel supplier.
	#User makes choices on which attributes are trusted for sharing with the travel supplier. (For example the user could have both a vaccination ~~cred~~ as well as a positive lab result.)		#User makes choices on which attributes are trusted for sharing with the travel supplier. (For example the user could have both a vaccination credential as well as a positive lab result.)

	Post Condition:		Post Condition:
	#If validation accepted, and traveler completes payment, the access to the travel conveyance is granted.		#If validation accepted, and traveler completes payment, the access to the travel conveyance is granted.
	#Note that at the end of the process of validating the traveler's health, the state issued conditions for travel will determine which path to use. The penalty for the ~~trvel~~ supplier follow correct verification ~~proceedurs~~ could result in civil penalties, including loss of use of travel trust registry.		#Note that at the end of the process of validating the traveler's health, the state issued conditions for travel will determine which path to use. The penalty for the travel supplier follow correct verification procedures could result in civil penalties, including loss of use of travel trust registry.

	Examples:		Examples:
	# Late binding token - FIDO U2F token, TEE TPM VSC, etc.		# Late binding token - FIDO U2F token, TEE TPM VSC, etc.
	# Client side code - javascript in a browser, native app, etc.		# Client side code: javascript in a browser, native app, etc.
	# Biometric matching is done in person by the Agent.		# Biometric matching is done in person by the Agent.
	# Biometric matching is done by the smartphone which can unlock access directly.		# Biometric matching is done by the smartphone which can unlock access directly.

Tomjones: /* Scenarios */

2021-02-07T22:24:52Z

Scenarios

← Older revision		Revision as of 22:24, 7 February 2021
Line 37:		Line 37:
	#Traveler has a ticket to ride from a supplier they have not previously used.		#Traveler has a ticket to ride from a supplier they have not previously used.
	#Traveler is informed of the requirement for a Health Travel Credential.		#Traveler is informed of the requirement for a Health Travel Credential.
	#Traveler acquires Credential from a health care provider, for example a lab, which ~~creates~~ a record in an EHR.		#Traveler acquires Credential from a health care provider, for example a lab, which populatetes a record in an EHR.
	#An approved [[Credential Service Provider]] accepts the record from the EHR and creates a Health Credential meeting the criteria of the Trust Registry.		#An approved [[Credential Service Provider]] accepts the record from the EHR and creates a Health Credential meeting the criteria of the Trust Registry.
	#Access Agent asks traveler for a ~~verifed~~ claim of Health with a nonce.		#Access Agent asks traveler for a verified claim of Health with a nonce.
	#Traveler smartphone sends verifiable Presentation of the Health credential they acquired from verifier.		#Traveler smartphone sends verifiable Presentation of the Health credential they acquired from verifier.
	#Access Agent asks verifier for proof. (This would be by redirect to verifier through traveler browser)		#Access Agent asks verifier for proof. (This would be by redirect to verifier through traveler browser)
Line 46:		Line 46:
	Alternative Paths (eg a hydroplane going from Seattle to Victoria):		Alternative Paths (eg a hydroplane going from Seattle to Victoria):
	#Traveler has a ticket to ride.		#Traveler has a ticket to ride.
	#Supplier asks traveler for a ~~verifed~~ claim of Health with a nonce.		#Supplier asks traveler for a verified claim of Health with a nonce.
	#Consumer asks verifier directly for proof with nonce from Supplier.		#Consumer asks verifier directly for proof with nonce from Supplier.
	#Verifier asks consumer to enter token for proof of presence.		#Verifier asks consumer to enter token for proof of presence.
	#Verifier ~~send~~ validated claim with nonce of supplier with short expiration time (10-20 mins - alternate life time of duration of session).		#Verifier sends validated claim with nonce of supplier with short expiration time (10-20 mins - alternate life time of duration of session).
	#Consumer sends verified claim to supplier that can let them board immediately.		#Consumer sends verified claim to supplier that can let them board immediately.

Line 56:		Line 56:
	# Children credentials must be located on someone else's phone.		# Children credentials must be located on someone else's phone.
	# The current path leads to one wallet per credential.		# The current path leads to one wallet per credential.
	# If that cannot be accommodated one parent will be searching around on their phone for many additional ~~creds~~.		# If that cannot be accommodated one parent will be searching around on their phone for many additional credentials.
	# Of the whole family, one ~~cred~~ is not accepted by the security agent and the whole family misses the flight.		# Of the whole family, one credential is not accepted by the security agent and the whole family misses the flight.
	# There is no agency at the airport that can rectify the problem.		# There is no agency at the airport that can rectify the problem.
	# One mitigation for this scenario would be a self-check web site where the parents could check every ~~cred~~ before leaving home.		# One mitigation for this scenario would be a self-check web site where the parents could check every credential before leaving home.

	A different path using biometrics:		A different path using biometrics: