ehn-dcc-development / ehn-sign-verify-python-trivial

Extremely minimal python implementation of the eHN-S protocol.
European Union Public License 1.2
76 stars 41 forks source link

Verify DGC through 3rd party service #19

Open chauhan-rohit opened 2 years ago

chauhan-rohit commented 2 years ago

Hello @dirkx ,

I am from an airline IT team and we are creating an application to use DGC for retrieving Vaccination information. This information is needed to determine whether traveler is allowed to fly to particular destination based on destination country covid rules. We are able to decode the DGC QR code using the standard libraries but struggling with Verification process. We referred the below official docs, but couldn't figure out how a third party can verify a DGC. Our use case is to accept DGC for all countries. https://ec.europa.eu/health/sites/default/files/ehealth/docs/digital-green-certificates_v4_en.pdf https://ec.europa.eu/health/sites/default/files/ehealth/docs/digital-green-certificates_v5_en.pdf

dslmeinte commented 2 years ago

Hi @chauhan-rohit,

The following document presents a lot more details about the verification of a DCC (“DGC” is the old acronym): https://ec.europa.eu/health/sites/default/files/ehealth/docs/eu-dcc_validation-rules_en.pdf The context of that document is that of validation rules, but it applies even when validation rules are not known, or present.

Note that verifying a DCC is considered as processing for the GDPR, so the relevant regulation applies. In that light, the following document is especially interesting for you: https://ec.europa.eu/health/sites/default/files/ehealth/docs/covid-certificate_traveller-onlinebooking_en.pdf

I hope that helps. Let us know if you have more questions.