DCCValidator

Xamarin App for validating EU Digital Covid Certificate

About DCC Validator

This GitHub-repository contains a reference implementation for the validation of the EU Digital Covid Certificate

The solution is developed by Swedish Agency for Digital Government (DIGG).

Components

• [DGCValidator] - The Common Xamarin code.

• [DGCValidator.Android] - Android specific code.

• [DGCValidator.iOS] - iOS Specific code.

External resources

DCC validator downloads, and caches external resources that are used during the verification process. The application downloads its resources once every 24 hours, when internet connectivity is available. In the event that no internet connectivity is available or that the resources can't be downloaded, then the cached version of the resources are used until they can be downloaded and cached once again.

The application uses the Swedish DCC Trust Point to download its external resources

• QA-environment https://dgcg-qa.covidbevis.se/tp/
• Production-environment https://dgcg.covidbevis.se/tp/

There are two resources that the application needs to perform the verification:

• Trust List - A list of all valid Signature public keys
• Value Sets - Multiple value sets each with a defined set of values. E.g. vaccines-covid-19-names

The resources available at the Swedish DCC Trust Point have their origin in the EU Digital Covid Certificate Gateway (EU DCCG), as shown in the following illustration:

More information about the Swedish DCC Trust Point can be found at DCC-trust

Test Certificates

The following certificates can be used in the QA-environment.

Vaccination certificates

Valid Signature (Signature public key present at DGCG-QA)

Valid through 2023-07-01, Vaccine Comirnaty, Dose 1/2

Valid through 2023-07-01, Vaccine Comirnaty, Dose 2/2

Valid through 2023-07-01, Vaccine Comirnaty, Dose 3/2

Valid through 2023-07-01, Vaccine Comirnaty, Dose 3/3

Valid through 2023-07-01, Vaccine BBIBP-CorV, Dose 2/2

Expired, Vaccine Comirnaty, Dose 2/2

Invalid Signature (Signature public key not present at DGCG-QA)

Invalid signer & expired

Copyright © 2021, Myndigheten för digital förvaltning (DIGG). Licensed under the MIT license.