Health pass systems and methods
System and methods are provided for issuing, using and maintaining passes which may be used to show a current status of approved individuals. In some embodiments, the passes are health passes and the status is a health status.
1 . A computerized method, comprising:
receiving, at a network operator device, an authorization request message to identify a health status of an individual, the authorization request message transmitted from a point of interaction device and including information read from a health pass device associated with the individual, the information including: (i) an account number associated with a health pass of the individual and (ii) a cryptogram, the cryptogram generated by performing a cryptographic process on the health pass device using a secret key and the account number, wherein the authorization request message is received by the network operator device from the point of interaction device over a bankcard network;
comparing, by the network operator device, the cryptogram read from the health pass device and received in the authorization request message with information from the network operator device to authenticate the validity of the health pass by
generating a second cryptogram using a network operator version of the secret key and the account number;
analyzing the cryptogram generated by the health pass device and the second cryptogram to determine if the information read from the health pass device matches the second cryptogram;
determining that the authorization request message is declined when the analysis determines that the information read from the health pass device does not match the second cryptogram;
determining that the authorization request message is approved when the analysis determines that the information read from the health pass device matches the second cryptogram;
operating the network operator device to perform a lookup of a secure database using the account number to retrieve a health status record associated with the account number in the case where the authorization request message is approved; and
transmitting, in the case where the authorization request message is approved, the health status record to the point of interaction device over the bankcard network such that the health pass device does not store the health status record.
2 . The computerized method of claim 1 , wherein the point of interaction device is a contactless reader having a display, and further comprising displaying the health status information on the display.
3 . The computerized method of claim 1 , wherein the health pass device is a device associated with the individual.
4 . The computerized method of claim 1 , further comprising:
comparing the health status record to at least a first rule associated with the point of interaction device to cause a message to be displayed at the point of interaction device.
5 . The computerized method of claim 1 , wherein the authorization request message further includes information specifying one or more health pass requirements.
6 . The computerized method of claim 5 , wherein the health pass requirements include at least one of (i) a date or recency of a test, (ii) a type of a test, and (iii) a test vendor qualification.
7 . The computerized method of claim 5 , further comprising:
determining whether the health status record satisfies the one or more health pass requirements.
8 . The computerized method of claim 1 , wherein the health pass device is one of: (i) a mobile phone, (ii) a wearable device, and (iii) a physical chip card.
9 . The computerized method of claim 1 , wherein the authorization request message includes an expiry date.
10 . The computerized method of claim 9 , wherein the account number, the expiry date, and cryptographic data to generate the cryptogram are stored in a memory of the health pass device.
11 . The computerized method of claim 1 , wherein the authorization request message received from the point of interaction device is formatted as a financial transaction authorization request message and the health status record transmitted to the point of interaction device is formatted as a financial transaction authorization response message.
12 . The computerized method of claim 1 , further comprising:
transmitting a decline message to the point of interaction device over the bankcard network in the case where the authorization request message is declined.