2021-04-16 Paper Based Credentials Drafting Group Meeting Notes

Attendees

  • Tony Rose
  • Rebecca Distler
  • Travis James
  • Rich Eicher
  • David Janes
  • Vitor Pamplona
  • Justin Dossey
  • Erica Frenkel
  • Adam Lemmon
  • Drummond Reed
  • Lucy Yang
  • Julian Ranger
  • Jammal Dorsey

Agenda Items

TimeItemWho
2 minWelcome & Antitrust Policy NoticeRebecca
40 minOutstanding TopicsTony
10 min

Walk Through of New Template

Rebecca

3 minWrap upChair 

Presentations

Recording

Topic: Good Health Pass - Paper Credentials
Start Time : Apr 16, 2021 11:01 AM

Meeting Recording:
https://zoom.us/rec/share/DHDMF2Q_H1sdg2cX68O0Tl42WTCCA_uTW1WTbkQQBOTqeuqfI0kQucpDvFdoNidg.85iPDR0tlScuIwk-

Notes

1. Welcome and Linux Foundation antitrust policy

2. Outstanding Topics

Human Readable Paper

  • PathCheck / IDEO concept (explaining which QR code has PII)
    • With QR codes, it isn’t intuitively obvious what information is included 
  • Machine can convert back to what we’re discussing (doesn’t matter what versions we apply to the QR, unless it’s password protected)
    • Camera on phone can read fields (because no encoding in there)
    • Do not recommend having a password requirement (no way to recover it unless there is online system)
    • Recommend human readability (read by pointing any camera on it) - if you can make it readable, do it because it enhances user experience (and doesn’t damage privacy)
  • Data processors vs. controllers - don’t have any way of controlling this. Add branding to signal that we’re not sending data to places we shouldn’t be sending it to?
    • Verifying the verifier is a well established consideration (your data, share where you want - but also, it’s your data and we should help protect how you share it)
  • Policies should be established by each governance framework; trust registry architecture designed 
  • Context important - verifying within app the other verifier (are they using a “certified” app); GHP certification program would be a major effort 
  • Decision on paper is you don’t have a digital wallet that can show you on paper
  • Have an app that would be trusted app - strict terms; everyone registers but the consumer registration is super simple; terms and conditions need to help people understand what they can and cannot do 
    • App is where the risk is (company could be siphoning data)
    • With individual, have financial model where there is a charge (create an ecosystem)
    • Need for financial model (rev stream for app developers)

3. New Template Walkthrough 

4. Wrap up 

  • Next steps

       

Action Items

  1. Marie to outline new template (articulating problems for paper as it relates to the other groups)