<div dir="ltr">There is actually a cautionary tale in that. A single QR code was sufficient to carry one, two or maybe even three FHIR vaccination "events", but with 5 or more, the FHIR prolixity has overflowed to a second QR code, which doesn't really work with the primary display purpose on a smartphone. The lesson here is the long creds carry a penalty which may not be fully understood for years after the std is created.<div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>..tom</div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Dec 2, 2022 at 11:33 PM Kristina Yasuda via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>
<div>
<div dir="ltr">
<div>Smart health cards display User’s credential (main use case being vaccination credential) in a QR code and in those scenarios it was not necessary for a verifier to display any QR code, user knew QR code of which credential to show.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">For large size credentials, there is smart health links, where a QR code contains a URL to a credential. In which case, a request from the verifier is also not defined - user knows QR code of what cred to show.</div>
<div dir="ltr"><a rel="noreferrer noopener" href="https://docs.smarthealthit.org/smart-health-links/" id="m_4217969181747768811ms-outlook-mobile-sharing-link-anchor-6686c5f4-767a-4bb6-a61b-4e784b6f3935" target="_blank">https://docs.smarthealthit.org/smart-health-links/</a></div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><a rel="noreferrer noopener" href="https://docs.smarthealthit.org/smart-health-links/" id="m_4217969181747768811ms-outlook-mobile-sharing-link-anchor-63556269-39f7-49de-bf0c-542466e83ce0" target="_blank">https://docs.smarthealthit.org/smart-health-links/</a><br>
</div>
<div dir="ltr">Cheers, </div>
<div dir="ltr">Kristina </div>
</div>
</div>
<div id="m_4217969181747768811ms-outlook-mobile-signature">
<div><br>
</div>
Get <a href="https://aka.ms/o0ukef" target="_blank">Outlook for iOS</a></div>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_4217969181747768811divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Openid-specs-ab <<a href="mailto:openid-specs-ab-bounces@lists.openid.net" target="_blank">openid-specs-ab-bounces@lists.openid.net</a>> on behalf of David Chadwick via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>><br>
<b>Sent:</b> Friday, December 2, 2022 7:33:36 AM<br>
<b>To:</b> Torsten Lodderstedt <<a href="mailto:torsten@lodderstedt.net" target="_blank">torsten@lodderstedt.net</a>><br>
<b>Cc:</b> David Chadwick <<a href="mailto:d.w.chadwick@verifiablecredentials.info" target="_blank">d.w.chadwick@verifiablecredentials.info</a>>; Artifact Binding/Connect Working Group <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>><br>
<b>Subject:</b> Re: [Openid-specs-ab] OpenID for Verifiable Presentations over BLE (Request for WG Adoption)</font>
<div> </div>
</div>
<div>
<p><br>
</p>
<div>On 02/12/2022 15:04, Torsten Lodderstedt wrote:<br>
</div>
<blockquote type="cite"><br>
<div><br>
<blockquote type="cite">
<div>Am 02.12.2022 um 15:59 schrieb David Chadwick <<a href="mailto:d.w.chadwick@verifiablecredentials.info" target="_blank">d.w.chadwick@verifiablecredentials.info</a>>:</div>
<br>
<div>
<div>
<p><br>
</p>
<div>On 02/12/2022 13:48, Torsten Lodderstedt wrote:<br>
</div>
<blockquote type="cite"><br>
<div><br>
<blockquote type="cite">
<div>Am 02.12.2022 um 12:46 schrieb David Chadwick <<a href="mailto:d.w.chadwick@verifiablecredentials.info" target="_blank">d.w.chadwick@verifiablecredentials.info</a>>:</div>
<br>
<div>
<div>
<p><br>
</p>
<div>On 02/12/2022 11:24, Torsten Lodderstedt wrote:<br>
</div>
<blockquote type="cite">Hi David,
<div>
<div><br>
<blockquote type="cite">
<div>Am 23.11.2022 um 19:14 schrieb David Chadwick via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>>:</div>
<br>
<div>
<div>
<p>Hi Torsten</p>
<p>excellent work. I fully support its adoption by the WG</p>
<div><br>
</div>
</div>
</div>
</blockquote>
<br>
Thanks.<br>
<blockquote type="cite">
<div>
<div>
<p>I note however that if the Verifier uses a QR code to kick off the transaction, then the wallet could equally well display a QR code containing the vp_token (assuming the VC is small enough) in which case BLE will not be needed. This flow should
be supported.</p>
</div>
</div>
</blockquote>
<div>Do you mean the wallet would show a QR code in response to the request encoded in the verifier’s QR code?</div>
</div>
</div>
</blockquote>
<p>Yes, the wallet can display a QR code in answer to the verifier's request (in a QRcode). This only works for small VP/VC due to the size restrictions of QR codes,
</p>
</div>
</div>
</blockquote>
<div>The QR code only contains a small amount of data sufficient to establish a secure connection. The presentation request itself is sent over BLE. Putting the whole request in the QR Code would result in a much bigger QR Code.
<br>
</div>
</div>
</blockquote>
<p>So you are using the ISO mDL model where the initial message only kicks off the BLE, then the request and response are sent via BLE. I misunderstood. I thought the request was in the QRcode (as per the cross device flow) and would have an additional
parameter such as UseBLE=True; - a bit like we do with Post=True for the response)</p>
<p>If you use this model then you dont need a special message to kick off the BLE do you?<br>
</p>
<blockquote type="cite">
<div>
<div><br>
</div>
<div>I would suggest to treat this is a another protocol besides BLE. <br>
</div>
</div>
</blockquote>
<p>Surely it would be better if the RP could display one QRcode with it containing the choices that the wallet can take, instead of multiple QR codes each for a different mode of interaction?</p>
<div><br>
</div>
</div>
</div>
</blockquote>
<br>
This makes the protocol more complex than it is right now and the QR Code back and forth is not super use friendly.
<br>
</div>
</blockquote>
<p>Actually we found it was liked by users in user trials that we performed at a cinema during lockdown.</p>
<p>The cinema displayed a QR code on its window. The customer scanned this into their wallet whilst queuing, then on arrival at the ticket desk showed their QR code on their wallet to the receptionist which scanned it in, and if OK, they were let into the cinema.
In our case the QRcode was a pointer to a COVID VC, but it could just have well been the VC itself. (We built a generic model that could cope with any size of VC and any number of VCs in the VP, which is why we used a pointer rather than the VC itself).</p>
<p>Kind regards</p>
<p>David<br>
</p>
<blockquote type="cite">
<div><br>
</div>
<div>I would be reluctant to introduce additional complexity if we find out the BLE solution is quick and has a great UX.<br>
<blockquote type="cite">
<div>
<div>
<p>Kind regards</p>
<p>David<br>
</p>
<blockquote type="cite">
<div>
<blockquote type="cite">
<div>
<div>
<p>but it will be a lot simpler than setting up a BLE session (which I always find is tedious to do - e.g. between my car and mobile phone).</p>
<div><br>
</div>
</div>
</div>
</blockquote>
<div><br>
</div>
You don’t need to setup a BLE session yourself with the QR Code approach. That will happen automatically. UX is key! </div>
<div>
<blockquote type="cite">
<div>
<div>
<p>Kind regards</p>
<p>David<br>
</p>
<blockquote type="cite">
<div>
<div>
<div>
<div><br>
</div>
<div>best regards.</div>
<div>Torsten. </div>
</div>
<blockquote type="cite">
<div>
<div>
<div><br>
</div>
<p>Kind regards</p>
<p>David<br>
</p>
<div>On 23/11/2022 17:52, Torsten Lodderstedt via Openid-specs-ab wrote:<br>
</div>
<blockquote type="cite">Hi all,
<div><br>
</div>
<div>Kristina, Kenichi, Sasi, Ramesh, and myself have been working for a couple of month on a specification to enable VC presentation over BLE. </div>
<div><br>
</div>
<div>Here is the link the individual draft: <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftlodderstedt.github.io%2Fopenid-for-verifiable-presentations-offline-1_0-00.html&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb957c71aaf0e42b8373908dad47a9ea3%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638055920409907444%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=uBiTIfhrC0iy8Z8HHftP4ArY8XLL2aRXXb60OYW0GMQ%3D&reserved=0" target="_blank">https://tlodderstedt.github.io/openid-for-verifiable-presentations-offline-1_0-00.html</a></div>
<div><br>
</div>
<div>We think this would be a valuable extension to the OpenID 4 VCs protocol family as it would allow offline presentation (e.g. at the entrance of a conference or a restaurant) using the mechanisms we already have in OpenID4VPs.</div>
<div><br>
</div>
<div>An implementation of the spec is under way at MOSIP. </div>
<div><br>
</div>
<div>We ask the WG to consider this draft for adoption as WG document. </div>
<div><br>
</div>
<div>best regards,</div>
<div>Torsten </div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Openid-specs-ab mailing list
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a>
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.openid.net%2Fmailman%2Flistinfo%2Fopenid-specs-ab&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb957c71aaf0e42b8373908dad47a9ea3%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638055920409907444%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=kclziXCuhOX2fIfI6qFpfu76VRl0r4o8GiRKdIoek6Y%3D&reserved=0" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a>
</pre>
</blockquote>
</div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.openid.net%2Fmailman%2Flistinfo%2Fopenid-specs-ab&data=05%7C01%7CKristina.Yasuda%40microsoft.com%7Cb957c71aaf0e42b8373908dad47a9ea3%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638055920409907444%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=kclziXCuhOX2fIfI6qFpfu76VRl0r4o8GiRKdIoek6Y%3D&reserved=0" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br>
</blockquote>
</div>
</div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div>