2021-04-16 Paper Based Credentials Drafting Group Meeting Notes
Attendees
- Tony Rose
- Rebecca Distler
- Travis James
- Rich Eicher
- David Janes
- Vitor Pamplona
- Justin Dossey
- Erica Frenkel
- Adam Lemmon
- Drummond Reed
- Lucy Yang
- Julian Ranger
- Jammal Dorsey
Agenda Items
Time | Item | Who |
---|---|---|
2 min | Welcome & Antitrust Policy Notice | Rebecca |
40 min | Outstanding Topics | Tony |
10 min | Walk Through of New Template | Rebecca |
3 min | Wrap up | Chair |
Presentations
Recording
Topic: Good Health Pass - Paper Credentials
Start Time : Apr 16, 2021 11:01 AM
Meeting Recording:
https://zoom.us/rec/share/DHDMF2Q_H1sdg2cX68O0Tl42WTCCA_uTW1WTbkQQBOTqeuqfI0kQucpDvFdoNidg.85iPDR0tlScuIwk-
Notes
1. Welcome and Linux Foundation antitrust policy
2. Outstanding Topics
Human Readable Paper
- PathCheck / IDEO concept (explaining which QR code has PII)
- With QR codes, it isn’t intuitively obvious what information is included
- Machine can convert back to what we’re discussing (doesn’t matter what versions we apply to the QR, unless it’s password protected)
- Camera on phone can read fields (because no encoding in there)
- Do not recommend having a password requirement (no way to recover it unless there is online system)
- Recommend human readability (read by pointing any camera on it) - if you can make it readable, do it because it enhances user experience (and doesn’t damage privacy)
- Data processors vs. controllers - don’t have any way of controlling this. Add branding to signal that we’re not sending data to places we shouldn’t be sending it to?
- Verifying the verifier is a well established consideration (your data, share where you want - but also, it’s your data and we should help protect how you share it)
- Policies should be established by each governance framework; trust registry architecture designed
- Context important - verifying within app the other verifier (are they using a “certified” app); GHP certification program would be a major effort
- Decision on paper is you don’t have a digital wallet that can show you on paper
- Have an app that would be trusted app - strict terms; everyone registers but the consumer registration is super simple; terms and conditions need to help people understand what they can and cannot do
- App is where the risk is (company could be siphoning data)
- With individual, have financial model where there is a charge (create an ecosystem)
- Need for financial model (rev stream for app developers)
3. New Template Walkthrough
4. Wrap up
- Next steps
Action Items
- Marie to outline new template (articulating problems for paper as it relates to the other groups)