What happens behind the scenes when a EU COVID-19 vaccine certificate gets scanned?
There is a QR code which I think gets translated into an ID. How does that ID get checked? Is there a request to a common EU database with Switzerland and UK?
Best Answer
Given that the check also works offline (just tested it myself with the CovPass Check app), there cannot be any requests to any server. However, what the QR code includes, is data about the person (name and date of birth), as well as the information if the vaccination is complete (at least for the digital certificate issued in Germany). That data is most likely signed with a private key from the issuer, and this signature can then be validated with a public key, that's part of the check app. This process doesn't require any internet connection (the process of creating the QR code requires it, since it has to be generated by the holder of the private key).
Pictures about "What happens behind the scenes when a EU COVID-19 vaccine certificate gets scanned?"
Europe wants COVID-19 'vaccine certificates' as soon as possible. But how will they work? | ABC News
Sources: Stack Exchange - This article follows the attribution requirements of Stack Exchange and is licensed under CC BY-SA 3.0.
Images: Nataliya Vaitkevich, Maksim Goncharenok, Maksim Goncharenok, Maksim Goncharenok