A privacy-preserving distributed platform for COVID-19 vaccine passports

Abstract

Digital vaccination passports are being proposed by various governments internationally. Trust, scalability and security are all key challenges in implementing an online vaccine passport. Initial approaches attempt to solve this problem by using centralised systems with trusted authorities. However, sharing vaccine passport data between different organisations, regions and countries has become a major challenge. A platform for creating, storing and verifying digital COVID-19 vaccine certifications is presented, making use of InterPlanetary File System (IPFS) to guarantee that there is no single point of failure and to allow data to be securely distributed globally. Blockchain and smart contracts are also integrated into the platform to explicitly determine policies and log access rights to the passport data while ensuring all actions are audited and verifiably immutable. Our proposed platform realises General Data Protection Regulation (GDPR) requirements in terms of user consent, data encryption, data erasure and accountability obligations. We assess the scalability and performance of the platform using IPFS and Blockchain test networks.