Since The EU's COVID certificate should be available on July 1, 2021. As before, the ESET experts still have security concerns. There are some weak points that can be exploited for abuse.
In the opinion of ESET, however, abuse cannot be ruled out as the procedures are identical to the existing ones. “It must be clearly stated, however, that the creation of screenshots on smartphones cannot be perfectly prevented from a technological point of view. This becomes even more problematic if the COVID vaccination document is simply printed out without security features. However, this is currently still practiced at the exhibition.
Nobody will check the ID
It is utopian to believe that every restaurant or shop will always show an identity card to verify the vaccination status. Security manufacturer ESET. “There are processes that are used by payment providers, for example. Using the backend system and plausibility check, the simultaneous use of the credit card in different countries or cities can be prevented.
Verification of the COVID vaccination card
A similar system would have been absolutely necessary for the digital COVID vaccination card or the use of the QR code, taking into account data protection compliance. When verifying the vaccination card via QR code and comparing the database, it must be compared with a backend system. However, this presupposes that the verification by a second device via app records the location data anonymously during the respective verification process and transmits it to the instance to be compared. It is clear that the examination that takes place must again be completely anonymized. This plausibility check would have been necessary in order to avoid misuse. ”Another weak point: The input systems - eg in medical practices - are insufficiently protected by passwords instead of two-factor authentication.
More at ESET.com
About ESET ESET is a European company with headquarters in Bratislava (Slovakia). ESET has been developing award-winning security software since 1987 that has already helped over 100 million users enjoy secure technology. The broad portfolio of security products covers all common platforms and offers companies and consumers worldwide the perfect balance between performance and proactive protection. The company has a global sales network in over 180 countries and branches in Jena, San Diego, Singapore and Buenos Aires. For more information, visit www.eset.de or follow us on LinkedIn, Facebook and Twitter.