Xamarin Application for verifying EU Digital Covid Certificate based on specific business rules for a specific use case.
This GitHub-repository contains a reference implementation for the validation of the EU Digital Covid Certificate, with the purpose of verifying vaccination events in regards to specific business rules for a specific use case.
The solution is developed by Swedish Agency for Digital Government (DIGG).
-
[VaccinbevisVerifiering] - The Common Xamarin code.
-
[VaccinbevisVerifiering.Android] - Android specific code.
-
[VaccinbevisVerifiering.iOS] - iOS Specific code.
Vaccinationsbevis Verifiering downloads, and caches resources that are used during the verification process. The application downloads its resources once every 24 hours, when internet connectivity is available. In the event that no internet connectivity is available or that the resources can't be downloaded, then the cached version of the resources are used until they can be downloaded and cached once again.
The application uses the Swedish DCC Trust Point to download its external resources
- QA-environment https://dgcg-qa.covidbevis.se/tp/
- Production-environment https://dgcg.covidbevis.se/tp/
There are two resources that the application needs to perform the verification:
- Trust List - A list of all valid Signature public keys
- Value Sets - Multiple value sets each with a defined set of values. E.g. vaccines-covid-19-names
The resources available at the Swedish DCC Trust Point have their origin in the EU Digital Covid Certificate Gateway (EU DCCG), as shown in the following illustration:
More information about the Swedish DCC Trust Point can be found at DCC-trust
Vaccinationsbevis Verifiering can download the currently active business rules for the applications specific use case.
The following certificates can be used in the QA-environment.
| Test case | Description | QR-code | Expected result |
|---|---|---|---|
| Fully vaccinated, quarantine period passed | Valid: 2023-07-01 Vaccine: Comirnaty (EU/1/20/1528) Dose: 2/2 Signature:Valid |
 |
✔ |
| Fully vaccinated, quarantine period passed | Valid: 2023-07-01 Vaccine: Janssen (EU/1/20/1525) Dose: 1/1 Signature:Valid |
 |
✔ |
| Booster dose within quarantine period | Vaccine: Comirnaty (EU/1/20/1528) Dose: 3/3 Vaccination Date: <14 days ago Signature:Valid |
Create from https://dgc.a-sit.at/ehn/ | ✔ |
| Booster dose within quarantine period | Vaccine: Janssen (EU/1/20/1525) Dose: 2/2 Vaccination Date: <14 days ago Signature:Valid |
Create from https://dgc.a-sit.at/ehn/ | ✔ |
| Expired |  |
❌ | |
| Invalid signature |  |
❌ | |
| Invalid DCC type | Type: Recovered |  |
❌ |
| Invalid DCC type | Type: Tested |  |
❌ |
| Not a DCC QR-code | Link to https://digg.se |  |
❌ |
| Invalid vaccine | Valid: 2023-07-01 Vaccine: BBIBP-CorV (BBIBP-CorV) Dose: 2/2 Signature: Valid |
 |
❌ |
| To few doses | Valid: 2023-07-01 Vaccine: Comirnaty (EU/1/20/1528) Dose: 1/2 Signature:Valid |
 |
❌ |
| Fully vaccinated within quarantine period | Vaccine: Comirnaty (EU/1/20/1528) Dose: 2/2 Vaccination Date: <14 days ago Signature:Valid |
Create from https://dgc.a-sit.at/ehn/ | ❌ |
| Fully vaccinated within quarantine period | Vaccine: Janssen (EU/1/20/1525) Dose: 1/1 Vaccination Date: <14 days ago Signature:Valid |
Create from https://dgc.a-sit.at/ehn/ | ❌ |
Copyright © 2021, Myndigheten för digital förvaltning (DIGG). Licensed under the MIT license.