Vaccination Certificate in Wallet (iOS)

[kevin-kraus]

Feature description

Show a pass in Wallet on iOS for quick access in certain situations by just double clicking the side- / home button.

For example if in the future the case arises that you need a proof of vaccination for certain places to enter (e.g. restaurants), you could access the vaccination certificate quicker by using the wallet shortcuts than searching the CWA and opening the tab for the certificate there.

Problem and motivation

User acceptance, simplicity of use and speed of processing for entry controls increase.

Is this something you're interested in working on

No

---

Internal Tracking ID: EXPOSUREAPP-7811

[Ein-Tim]

I'd suggest to open this issue in https://github.com/eu-digital-green-certificates/dgca-wallet-app-ios, since I don't expect that CWA will implement any features of the vaccination certificate which the DGCA doesn't have.

[jucktnich]

I do think, that the scanning implementation should be done by the dgca (if it's even possible), but the CWA could add a wallet card by its own.

[Ein-Tim]

This is now also tracked in eu-digital-green-certificates/dgca-wallet-app-ios#69.

[muuuh]

Please note that having to unlock the phone for opening the app and potentially handing out the phone is a privacy issue (reading mails, photos).

On the other hand, when the vaccination certificate is in the ios wallet, the vaccination information (owners name?) can be accessed by anybody with access to the phone (without need to unlock).

[dsarkar]

FYI Digitaler-Impfnachweis/certification-apis#37

[ezadoo]

As title of this feature-request says that vaccination certificates should be possible to import into Apple Wallet I would like to mention that also the (negative) results of rapid antigen tests could (and should) be able to import into Wallet too.

As I think much of the background-processes for creating the wallet passes would be similar, I don't want to create an additional feature-request, with this fairly similar topic, but maybe the rapid test results could be tracked in this thread too.

[kevin-kraus]

As title of this feature-request says that vaccination certificates should be possible to import into Apple Wallet I would like to mention that also the (negative) results of rapid antigen tests could (and should) be able to import into Wallet too.

As I think much of the background-processes for creating the wallet passes would be similar, I don't want to create an additional feature-request, with this fairly similar topic, but maybe the rapid test results could be tracked in this thread too.

I like your proposal as it would further more improve access speed to the information. Also, Apple Wallet Cards have a "expiring" timestamp AFAIK (See "expirationDate" here)so they could also be deleted/invalidated automatically.

I would consider creating a new issue. Your proposal is requesting changes in an other module. Therefore it has no direct connection to this issue.

[achisto]

Wouldn't any app that lets your create Apple Wallet Passes be sufficient for solving this problem? There are multiple apps that can create wallet passes from any qr-code (or barcode) you give them. And in the end the qr-code you receive after your vaccination is just that - a qr-code. 🤔

[Ein-Tim]

For your information: eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment) says:

Unfortunately, this is a security and privacy concern, as already discussed in the CWA GitHub. As this would allow the QR code to be visible without any sort of user validation / passcode. We have discussed this internally and came to the conclusion to not implement it because of the security concerns and that it is out of scope.

So I would not expect any development on this, sorry.

[kevin-kraus]

For your information: eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment) says:

Unfortunately, this is a security and privacy concern, as already discussed in the CWA GitHub. As this would allow the QR code to be visible without any sort of user validation / passcode. We have discussed this internally and came to the conclusion to not implement it because of the security concerns and that it is out of scope.

So I would not expect any development on this, sorry.

@Ein-Tim you probably could add a disclaimer that privacy is not ensured by using this feature.

Otherwise what I'm asking myself now, the privacy is also not ensured when a user is using a device not secured by any passcode / biometric authentication. Or am I wrong here?
Therefore a user with no passcode should not be allowed to use the vaccination / rapid test features, right?

[Ein-Tim]

@kevin-kraus

Since I'm also only a community member, I suggest that you add your comment to eu-digital-green-certificates/dgca-wallet-app-ios#69.

Otherwise what I'm asking myself now, the privacy is also not ensured when a user is using a device not secured by any passcode / biometric authentication. Or am I wrong here?
Therefore a user with no passcode should not be allowed to use the vaccination / rapid test features, right?

I think the difference here is that the user can protect his vaccination certificate & rapid tests in the app if he wants to, but he can't protect the Apple Wallet even if he wants to...

Edit: Apparently I was wrong with that, see eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment).

[jucktnich]

@muuuh 1. You can disable access from Lock Screen and 2. you can only access cards which work with Apple Pay from the lockscreen https://support.apple.com/en-us/HT204003

[kevin-kraus]

Okay from the comments that I'm seeing in eu-digital-green-certificates/dgca-wallet-app-ios corona-warn-app/cwa-wishlist#69 there will be no implementation of this feature in the EU context. Otherwise will it still be implemented in the CWA? Because I cannot see any direct links between the whole EU-Certificate stuff and the CWA. Even if the EU don't want to implement it, doesn't necessarily mean that it won't be integrated into CWA.

I think that it will make a good impact for faster usage of the vaccination certificate. Even today we can see that the certificate will be needed to provide proof in more and more places daily (restaurants, events etc.). The CWA only displays the vaccination QR code. Therefore it should be relatively easy to just copy that QR-Code and insert it into a wallet pass.

Regarding the security/privacy issues I think we should give the user a explicit warning that private data could be exposed if they are using no passcode or do not turn off "Access to pass on lockscreen" in the settings. After checking that they have read the risk warning and accept the risk the user should have the choice to use the feature or not. Please stop the paternalism regarding privacy. If the user knows about the risk they should be in control if they accept it or not.

So, can we expect an implementation in CWA? @maugst

[muuuh]

@jucktnich

I wrote:

Please note that having to unlock the phone for opening the app and potentially handing out the phone is a privacy issue (reading mails, photos).

On the other hand, when the vaccination certificate is in the ios wallet, the vaccination information (owners name?) can be accessed by anybody with access to the phone (without need to unlock).

You wrote:

@muuuh 1. You can disable access from Lock Screen and 2. you can only access cards which work with Apple Pay from the lockscreen https://support.apple.com/en-us/HT204003

Don't get me wrong. I'm in favor of an option to show the vaccination status in Apple Wallet.

I wanted to point out that both in terms of implementation and non-implementation you can argue with "data protection"/security (i.e. confidentiality).

I think that a conscious setting is necessary in which the user is again made aware of the consequences. With that, it should then be sufficient.

Still, I consider an implementation through third-party apps (unsure if the qr-code format fits) or saving the QR code as lockscreen background as a workaround.

[jucktnich]

@muuuh Dunno why i wrote this 😅

[ezadoo]

@kevin-kraus

I would consider creating a new issue. Your proposal is requesting changes in an other module. Therefore it has no direct connection to this issue.

As there are currently discussed mainly the privacy concerns and possibilities of integrating the support of Apple Wallet in general I'am refraining from creating a second issue for rapid tests as it would be very similar topic, until a final decision regarding this topic in general is made.

But maybe we could keep the possibility of integrating rapid tests in a similar way too it the back of our minds.

[iMonZ]

It would be great if we could clear this up quickly! It’s already pretty late for this feature and if we wait further maybe we don’t need it anymore.
I just don’t see any progression. But vaccinations and negative tests should be in the apple wallet or if this doesn’t work at least as an Apple Watch app!

[riconeitzel]

I chime in here! Would be a HUGH step towards broad anticipation! double-plus-thumbs-up

[Ein-Tim]

But honestly, if it's not possible to show the QR-Code from the Lock Screen via Apple Wallet (see eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment)) then I don't see a benefit that huge...

Still it would be nice to have!

Edit: Maybe that with the Lock Screen is maybe not true, investigating...

[Ein-Tim]

FYI: If you want your QR-Code in your Apple Wallet now, take a look at: https://twitter.com/kkrdvc/status/1404418854231674885

[Nils-witt]

You can choose if can access the wallet when the device is locked.
Here is a screenshot of the setting for it

[jucktnich]

@Ein-Tim the benefit would be fe that you can use the pass on the watch

[jucktnich]

@Nils-witt afaik that's still not possible with cards not using Apple Pay and you also don't have triggers which would lead the pass to appear on the lockscreen as a message

[Nils-witt]

Yes, there is no notification or similar to direct access a specific card in this case. But with double click on the home button the wallet requires biometrics(depending on your settings) before it shows any cards and then you can browse all of your cards.

EDIT: The switch for "Wallet" enables the biometric requirement (in the picture: it is disabled)

[Ein-Tim]

It seems like Apple fixed the "Not checked" for Germany, now the entries show up as "Checked - Signature valid".

[Kamik423]

Still does not work for me.

[iMonZ]

It seems like Apple fixed the "Not checked" for Germany, now the entries show up as "Checked - Signature valid".

Doesn’t work for me.
Have you rescanned your certificate or just keep the already scanned one?

[Ein-Tim]

@Kamik423 & @iMonZ

I just scanned one of my certificates in and left it in the Health app for some days and this evening I was able to add it to the Wallet.

[iMonZ]

@Kamik423 & @iMonZ

I just scanned one of my certificates in and left it in the Health app for some days and this evening I was able to add it to the Wallet.

Thanks.
Good to know.

[kevin-kraus]

@Ein-Tim
Have you received a push notification or some other kind of notification as soon as your signatures were validated and you were able to add the certificates to your wallet?

Or did you just check every once in a while and at some point they were verified?

[Ein-Tim]

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

[iMonZ]

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

Great! It worked now!
I just opened health (hadn’t killed it this time so I kept it open) and it just got blue!
Sad thing I tried it and the security women used a Samsung a21 and it couldn’t scan it. She asked me: could you make it bigger.
I sayd not that is not possible. But after like 20 seconds it still worked!
Next thing would be Covid tests for 2g+ dear apple.

[GunniBusch]

I had no problems with scanning. It always worked even with the we code on a 32 mm Apple Watch

[idoodler]

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

Great! It worked now!

I just opened health (hadn’t killed it this time so I kept it open) and it just got blue!

Sad thing I tried it and the security women used a Samsung a21 and it couldn’t scan it. She asked me: could you make it bigger.

I sayd not that is not possible. But after like 20 seconds it still worked!

Next thing would be Covid tests for 2g+ dear apple.

You are able to also add PCR tests to Apple Health.

[Ein-Tim]

@kevin-kraus

You can add all types of EU DCCs.

[kaystrobach]

Just found out, that the App of the Techniker Krankenkasse is able to read the QR codes and pushes them into the apple wallet if wanted. So there is an option to solve that in the CWA if wanted. GDPR is no problem here.

[iMonZ]

Just found out, that the App of the Techniker Krankenkasse is able to read the QR codes and pushes them into the apple wallet if wanted. So there is an option to solve that in the CWA if wanted. GDPR is no problem here.

Or just update to iOS 15.4, then open the camera app and scan the code.
Done.
Easiest way ever

[iMonZ]

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

Great! It worked now!
I just opened health (hadn’t killed it this time so I kept it open) and it just got blue!
Sad thing I tried it and the security women used a Samsung a21 and it couldn’t scan it. She asked me: could you make it bigger.
I sayd not that is not possible. But after like 20 seconds it still worked!
Next thing would be Covid tests for 2g+ dear apple.

You are able to also add PCR tests to Apple Health.

How? This unfortunately doesn’t work for me.
I got an CWA Link for the Test

[Ein-Tim]

@iMonZ If you have a test certificate (like a vaccination certificate) just scan it with the native iOS camera and it opens in health.

[treysis]

@kaystrobach It isn't a GDPR problem but a problem of RKI's lawyers and the management decision not to revise the legal decisions.

[Ein-Tim]

FYI: iOS 15.4 is now in RC status: https://developer.apple.com/news/releases/?id=03082022d

I guess we can expect a public release in the next 7-10 days.

[Ein-Tim]

So, iOS 15.4 has now been released to the public: https://developer.apple.com/news/releases/?id=03142022d

[Hanashi]

So, iOS 15.4 has now been released to the public: https://developer.apple.com/news/releases/?id=03142022d

Nice, now we can remove CWA and CovPass.

[Ein-Tim]

@Hanashi

Please think about removing CWA, it offers many other features, including bluetooth and check-in based contact tracing.
iOS does not do that (-;

[iMonZ]

@Hanashi

Please think about removing CWA, it offers many other features, including bluetooth and check-in based contact tracing. iOS does not do that (-;

Not really.
Most features you don’t need anymore.
Most people only need a place for the certificate which is the wallet
And for the test there is no standardized QR code so you just need a pdf or picture or text where it says that you were tested.

so yeah you can uninstall the CWA app and definitely the CovPass App (that was useless in the first place)

[treysis]

@iMonZ but neither contact tracing nor check-in.

[iMonZ]

@iMonZ but neither contact tracing nor check-in.

Which both you don’t need anymore

[treysis]

Why not? You can also get the result of PCR tests much faster. And if positive test, you can warn others. Why don't we need this anymore?

[iMonZ]

Why not? You can also get the result of PCR tests much faster. And if positive test, you can warn others. Why don't we need this anymore?

actually you just get the results over Email
And btw you can add you pcr test to iOS as well and get there the notification ;)

[treysis]

PCR test? I got mine in the app, was very convenient.
Still useful for contact tracing and check-ins.

[iMonZ]

PCR test? I got mine in the app, was very convenient.
Still useful for contact tracing and check-ins.

I just test myself a few times a week and that’s it.
No need for contact tracing. Haven’t needed to use the checkin feature for a year aswell.
So yeah find yourself explanations for useless features.
The CWA was really good made.
I checked to source code so props on that maybe one of the best apps Germany has ever made. But the time has come to archive this projects.

[Ein-Tim]

I suggest to stay on topic here & be happy about the iOS 15.4 release. (-;

It is certainly discussable what is necessary and what not, but I think this is a decision everyone should make for themselves.

If you want to discuss the use of CWA in this state of the pandemic, I suggest to open a new issue in the wishlist/documentation repo.

[treysis]

So yeah find yourself explanations for useless features.

Useless for you...