Health safety system, service, and method
A vaccine system implementing a secure vaccine service to provide vaccine accounts for users, includes a display and user interface component providing user access to the vaccine service; a communications component providing third-party access to the vaccine service; a processor; and a non-transitory, computer readable storage medium having encoded thereon, machine instructions for operating the vaccine service. The processor executes the machine instructions to establish a secure vaccine account for the user, receive a vaccine transaction on behalf of the user, the vaccine transaction including a vaccine data package. The vaccine data package includes certified data for one or more vaccines administered to the user, the vaccine transaction provided by a medical facility administering the vaccines. The processor assigns a hash to the received vaccine transaction, and stores the hash and the vaccine data package in a block in a distributed ledger-architected database.
1 . A secure vaccine service system configured to generate and verify tamper-evident digital records of vaccine administration for use in automated venue access decisions, the system, comprising:
a vaccinated user sub-system, comprising:
a communications interface configured to receive data transmissions from an external computing device operated by one of a vaccinated user and an authorized third party, and
a non-transitory, computer readable storage medium having encoded thereon, machine instructions, which when executed by a vaccine service processor, cause the vaccine service processor to:
establish a secure vaccine account for the user;
receive through the communications interface, a vaccine transaction comprising certified data for one or more vaccines administered to the user;
generate a first one-way cryptographic hash of the certified data, the first one-way cryptographic hash comprising a tamper-evident digital record for the certified data;
store the certified in an off-chain database file indexed by a user identifier; and
store the first one-way cryptographic hash in a first block of a distributed ledger-structured database, wherein the first block comprises a reference to the off-chain database file; and
a venue control application, provided by the secure vaccine service system and executing on the external computing device, the venue control application comprising venue control machine instructions configured to:
transmit a venue access request comprising the user identifier and an authorization digital object to access the secure vaccine account of the user,
receive, in response to the venue access request, a copy of the certified data and contents of the first block, wherein the contents comprise the first one-way cryptographic hash,
receive a confirming one-way cryptographic hash of the copy of the certified data,
comparing the first one-way cryptographic hash and the confirming one-way cryptographic hash,
permit venue access to the user when the first one-way cryptographic hash and the confirming one-way cryptographic hash match exactly, and
provide a record of the venue access to the vaccinated user sub-system.
2 . The secure vaccine service system of claim 1 , wherein the copy of the certified data is provided by the vaccine service processor in a certified digital access document comprising a one-time read digital object.
3 . The secure vaccine service system of claim 2 , wherein the certified digital access document comprises a digital object with a time to live.
4 . The secure vaccine service system of claim 2 , wherein the certified digital access document is provided by the vaccine service processor for storage on a device of the user, wherein the certified digital access document is displayable on the device of the user and is scannable at an access point of a venue.
5 . The secure vaccine service system of claim 4 , wherein a certified medical facility provides certified data of a current vaccine for storage on the device of the user.
6 . The secure vaccine service system of claim 1 , wherein the vaccine service processor generates a second one-way cryptographic hash of the certified data and a record of the venue access, stores the second one-way cryptographic hash by creating a second block in the distributed ledger-structured database, and stores the certified data and the venue access in the off-chain database file, wherein the second one-way cryptographic hash protects integrity of the certified data and the venue access.
7 . The secure vaccine service system of claim 1 , the vaccine account of the user further comprising biometric data of one or more verified biometric samples uniquely identifying the user, the biometric samples comprising one or more of fingerprints, a retina scan, an image for facial recognition, and a voice recording for speech recognition, wherein the biometric samples are stored in the vaccine account of the user in a biometrics data block in the distributed ledger-structured database, the biometrics data block comprising a third one-way cryptographic hash of the biometric data, the third one-way cryptographic hash stored with the biometrics data block.
8 . The secure vaccine service system of claim 7 , wherein the biometric data are provided to the user for storage on a device of the user.
9 . The secure vaccine service system of claim 8 , wherein the user provides one or more biometric sample representations to the authorized third party.
10 . The secure vaccine service system of claim 8 , wherein to display vaccine data for the user on the device of the user, the user submits a contemporaneous biometric sample matching at least one biometric sample stored in the secure vaccine account of the user.
11 . The secure vaccine service system of claim 10 , wherein the biometric sample of the user is provided at a venue access for verification of the contemporaneous biometric sample of the user.
12 . The secure vaccine service system of claim 1 , wherein the certified data require submitting at least one biometric sample at a venue access point as part of a process for venue access.
13 . The secure vaccine service system of claim 1 , wherein the certified data are configured for printing.
14 . The secure vaccine service system of claim 1 , wherein the certified data guarantee all venue access requirements are met without displaying any vaccine data at the venue access.
15 . The secure vaccine service system of claim 1 , wherein a device of the user is scanned at a venue access point to provide access to a venue.
16 . The secure vaccine service system of claim 15 , wherein previously-issued certified data have not been scanned at an access point of the venue, wherein the authorized third party requests, and the secure vaccine service system provides, a certified copy of the previously-issued certified data.
17 . The secure vaccine service system of claim 16 , wherein the certified data permits access to additional venues operated by a venue control and having access requirements identical to those of the venue.
18 . A vaccine service method, comprising:
a processor establishing a secure vaccine account for a user;
receiving a vaccine transaction on behalf of the user, the vaccine transaction comprising certified data for one or more vaccines administered to the user, the vaccine transaction provided by a medical facility administering the one or more vaccines;
storing the certified data in an off-chain database file linked to the user;
generating a first one-way cryptographic hash of the certified data;
storing the first one-way cryptographic hash in a first block of a distributed ledger-structured database with a reference to the off-chain database file; and
the processor receiving an access request, from a third party, requesting access to the vaccine account of the user, wherein the processor operates to:
verify credentials of the third party,
for a verified third party, disseminate data from the vaccine account of the user to a venue control component, the data disseminated comprising the first one-way cryptographic hash and the certified data, wherein the verified third party compares the first one-way cryptographic hash and a confirming one-way cryptographic hash of the certified data, wherein an exact match of the first one-way cryptographic hash and the confirming one-way cryptographic hash indicates unaltered certified data,
receive a second one-way cryptographic hash of the certified data and the third party access,
generate second block to contain the second one-way cryptographic hash of the certified data and the third party access, and
store the second block in the distributed ledger-structured database with a reference to the off-chain database file.
19 . The vaccine service method of claim 18 , comprising:
providing by the processor, a list of requirements for accessing a first venue, the list consisting of one or more certification requirements selected from a first group consisting of a certified vaccination, a certified anti-body/antigen test result, and a certified test for absence of a virus.
20 . A non-transitory, computer readable storage medium having encoded thereon, machine instructions for operating a secure vaccine service system, wherein one or more processors execute the machine instructions to:
establish a secure vaccine account for a user;
receive data of a vaccine transaction on behalf of the user, the vaccine transaction comprising certified data for one or more vaccines administered to the user and a user identifier;
generate a first one-way cryptographic hash of the certified data;
store the certified data in an off-chain database of the secure vaccine account indexed by the user identifier;
store the first one-way cryptographic hash in a first block of a distributed ledger-structured database referenced by the user identifier; and
receive from a venue control application, a venue access request initiated by the user, the venue access request comprising the user identifier and an access authorization to the secure vaccine account of the user, wherein a processor:
receives a confirming one-way cryptographic hash of the certified data,
provides the confirming one-way cryptographic hash and the first one-way cryptographic hash to the venue control application,
receives a comparison result of the first one-way cryptographic hash and the confirming one-way cryptographic hash,
stores the comparison result and with the certified data in the off-chain database,
generates a second one-way cryptographic hash of the comparison result and the certified data, and
stores the second one-way cryptographic hash in a second block of the distributed ledger-structured database with a reference to the off-chain database, wherein the confirming one-way cryptographic hash and the first one-way cryptographic hash are an exact match, and the venue control permits venue access by the user.