Re: CBOR-LD stabilization (was: Re: Regarding CBOR-LD Web Transports)

Vaccination certificates and other digital paper credentials can be made
fraud-resistant without introducing centralized biometrics or a link to
primary documents like a driver's license or passport.

From a fraud-prevention perspective, a PRC is very different from a proof
of vaccination because it's a primary identity document. The issuer and
inspector of a vaccine certificate are expected to manually inspect the
primary credential as well as digitally verify the VC. By adding a
quantized face biometric alongside the VC, the presentation of a primary
credential is optional and the authentic VC is still linked to the person
presenting it.


On Wed, Apr 28, 2021 at 3:32 PM John, Anil <> wrote:

> >The use case driving this stuff is the vaccination certificate work as
> well as anti-fraud features on government-issued ID cards.
> DHS/SVIP/USCIS interest in this is two-fold:
> 1) We are a consumer/verifier of proof of vaccination as mandated by U.S.
> Law (See
> ).  Equity and access in the use of such credentials requires us to support
> paper based representations that are completely standards based, and can
> use the same verification infrastructure as digital with minimal to no
> cost.
> So the ability to round trip (VC <> CBOR-LD based QR Code <> VC) from
> digital to paper and back while maintaining the fidelity of the digital
> signature in a small size QR code is highly desired and attractive to us as
> an option that provides a clear bridge across the digital divide!  Given
> our existing investments in demonstrably interoperable VC/DID
> implementations, supporting bespoke implementations increases cost and
> complexity while not serving the needs of the many -- not a path to success
> for us!
> 2) We are moving forward on implementing the infrastructure to issue
> Digital Immigration Credentials such as Digital Permanent Resident Cards
> (PRC), Employment Authorization Documents and the like that are in full
> compliance with the W3C Verifiable Credential and W3C Decentralized
> Identifier standards in a manner that provides agency, control and consent
> to the holder in how such data is used.  Simultaneously, we are actively
> exploring the feasibility of printing the CBOR-LD VC Version of the PRC
> directly on the current paper based document as a possible option to enable
> ease of verification and prevent counterfeiting, and will be testing these
> options out to understand its various implications going forward.
> Best Regards,
> Anil
> Anil John
> Technical Director, Silicon Valley Innovation Program
> Science and Technology Directorate
> US Department of Homeland Security
> Washington, DC, USA
> Email Response Time – 24 Hours

Received on Wednesday, 28 April 2021 21:24:18 UTC