Publication detail

Privacy-Preserving Solution for European Union Digital Vaccine Certificates

DZURENDA, P. RICCI, S. ILGNER, P. MALINA, L. ANGLÉS, C.

Original Title

Privacy-Preserving Solution for European Union Digital Vaccine Certificates

Type

journal article in Web of Science

Language

English

Original Abstract

The recent COVID-19 pandemic situation highlights the importance of digital vaccine certificates. In response, the European Union (EU) developed EU Digital Vaccine Certificates to enable proof of non-infectivity and completed vaccinations. However, these solutions suffer from several shortcomings, such as ineffective certificate holder identification and a high violation of user privacy with the disclosure of sensitive information. In this work, we present a novel solution for privacy-preserving EU Digital Vaccine Certificates. Our solution solves the aforementioned privacy and security shortcomings and is in line with current EU legislation, i.e., the General Data Protection Regulation (GDPR), the upcoming revision of the electronic IDentification, Authentication, and trust Services (eIDAS), called regulation eIDAS 2.0, and the new tools that it envisages to be led by European digital identity. This identity is intended to allow citizens to prove their identity to access online services, share digital documents, or simply prove specific personal characteristics such as age without revealing their identity or other personal information. The core of our proposal is built on our novel attribute-based credential scheme, which can be easily implemented on various handheld devices, especially on Android smartphones and smartwatches. However, due to the lightweight nature of our scheme, it can also be implemented on constrained devices such as smart cards. In order to demonstrate the security, privacy, and practicality inherent in our proposal, we provide the security analysis of the cryptographic core along with a set of experimental results conducted on smartphones and smart cards.

Keywords

digital vaccine certificate;COVID-19;attribute-based credential;authentication;cryptography;security;privacy;Android;Bluetooth Low Energy;smart cards

Authors

DZURENDA, P.; RICCI, S.; ILGNER, P.; MALINA, L.; ANGLÉS, C.

Released

5. 10. 2023

Publisher

MDPI

ISBN

2076-3417

Periodical

Applied Sciences - Basel

Year of study

13

Number

19

State

Swiss Confederation

Pages from

1

Pages to

24

Pages count

24

URL

https://www.mdpi.com/2076-3417/13/19/10986

Full text in the Digital Library

http://hdl.handle.net/11012/214421

BibTex

@article{BUT184829,
  author="Petr {Dzurenda} and Sara {Ricci} and Petr {Ilgner} and Lukáš {Malina} and Carles {Anglés}",
  title="Privacy-Preserving Solution for European Union Digital Vaccine Certificates",
  journal="Applied Sciences - Basel",
  year="2023",
  volume="13",
  number="19",
  pages="1--24",
  doi="10.3390/app131910986",
  issn="2076-3417",
  url="https://www.mdpi.com/2076-3417/13/19/10986"
}