Re: CBOR-LD stabilization (was: Re: Regarding CBOR-LD Web Transports)

Vaccination certificates and other digital paper credentials can be made
fraud-resistant without introducing centralized biometrics or a link to
primary documents like a driver's license or passport.
https://github.com/HIEofOne/Trustee-Community/blob/master/Biometric%20Health%20Card.pdf


From a fraud-prevention perspective, a PRC is very different from a proof
of vaccination because it's a primary identity document. The issuer and
inspector of a vaccine certificate are expected to manually inspect the
primary credential as well as digitally verify the VC. By adding a
quantized face biometric alongside the VC, the presentation of a primary
credential is optional and the authentic VC is still linked to the person
presenting it.

Adrian

On Wed, Apr 28, 2021 at 3:32 PM John, Anil <anil.john@hq.dhs.gov> wrote:

> >The use case driving this stuff is the vaccination certificate work as
> well as anti-fraud features on government-issued ID cards.
>
> DHS/SVIP/USCIS interest in this is two-fold:
>
> 1) We are a consumer/verifier of proof of vaccination as mandated by U.S.
> Law (See
> https://www.uscis.gov/tools/designated-civil-surgeons/vaccination-requirements
> ).  Equity and access in the use of such credentials requires us to support
> paper based representations that are completely standards based, and can
> use the same verification infrastructure as digital with minimal to no
> cost.
>
> So the ability to round trip (VC <> CBOR-LD based QR Code <> VC) from
> digital to paper and back while maintaining the fidelity of the digital
> signature in a small size QR code is highly desired and attractive to us as
> an option that provides a clear bridge across the digital divide!  Given
> our existing investments in demonstrably interoperable VC/DID
> implementations, supporting bespoke implementations increases cost and
> complexity while not serving the needs of the many -- not a path to success
> for us!
>
> 2) We are moving forward on implementing the infrastructure to issue
> Digital Immigration Credentials such as Digital Permanent Resident Cards
> (PRC), Employment Authorization Documents and the like that are in full
> compliance with the W3C Verifiable Credential and W3C Decentralized
> Identifier standards in a manner that provides agency, control and consent
> to the holder in how such data is used.  Simultaneously, we are actively
> exploring the feasibility of printing the CBOR-LD VC Version of the PRC
> directly on the current paper based document as a possible option to enable
> ease of verification and prevent counterfeiting, and will be testing these
> options out to understand its various implications going forward.
>
> Best Regards,
>
> Anil
>
> Anil John
> Technical Director, Silicon Valley Innovation Program
> Science and Technology Directorate
> US Department of Homeland Security
> Washington, DC, USA
>
> Email Response Time – 24 Hours
>
>