Use Case Implementation Workstream
On May 25, the Use Case Implementation Workstream hosted a session (recording here) where David Chadwick, CEO of Verifiable Credentials Ltd., the software company behind the COVID certificate app for East Kent NHS in the UK, presented the Simple Universal Verifier (SUV) concept.
Until international standards are in place for all essential interconnecting components, SUV promises to solve a current dilemma where the providers of verifiable credential (VC) wallets support different cryptographic mechanisms, schemas, trust schemes, and policies for requesting VCs. SUV is well-positioned to become a short-term, wallet-agnostic solution that enables the verifier to request a verifiable presentation free from vendor lock-in while utilizing any VC cryptography, policies, schemas, or other requirements.
An exciting conversation also started to surface regarding biometric authentication during the meeting, a potential topic for a future call!
Rules & Governance Workstream
The Rules and Governance Workstream is preparing a draft of the CCI Governance Framework (GF) v3 to be reviewed by the participants of the workstream. The revised GF adopts the governance framework meta-model created at the Trust Over IP Foundation and is expected to help both existing and emerging digital trust ecosystems quickly adopt the essential aspects. Subsequent to the period of workstream review, the draft will be available to the wider CCI group and thereafter presented to the CCI leadership for approval and general availability as a CCI branded product. In parallel, the workstream is opening up a discussion on governance requirements around self-tests/home-test kits - a topic that is of current interest across many nations.
Vaccine Credentials Focus Group - US Subgroup
The US Subgroup met on May 27 to discuss 'What can / should the group do to jump start VC issuance in the US' (recording here). The main points include the identification of societal and business domains in the US where the issuance of COVID credentials could still be impactful. The domains mentioned were travel, institutions of higher educations and US EHR vendors.
On the US EHR vendor domain, the group discussion centered on ‘where’ in EHR’s data flow to attempt to collect vaccine administration data - ‘pre or post’ an IIS. The vendor example discussed was STC Health which has two access mechanisms, the MyIR mobile app and a Consumer Network access channel.
The group consensus was to pursue in more detail how LFPH:CCI could work with the EHR IIS vendor channels and develop a reference implementation for access to vaccination administration data for individuals.