Secure verification of medical status using a contactless card

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor, cause the processor to:

• receive, from a contactless card, a medical attestation, a digital signature of the medical attestation, and a public key of the digital signature;
• extract, from the medical attestation, an encrypted identification (ID) and a counter value associated with the encrypted ID based on a rule to validate the encrypted ID of the medical attestation;
• transmit the encrypted ID and the counter value to a server to validate the encrypted ID;
• determine, based on a decryption result received from the server, that the server decrypted the encrypted ID;
• determine, by an application, that a public key certificate chain for the digital signature does not include a digital signature of a first predefined entity of a plurality of predefined entities approved to sign the medical attestation, wherein the first predefined entity is specified by a first rule of a plurality of rules;
• determine, by the application based on a second rule of the plurality of rules and the determination that the public key certificate chain does not include the digital signature of the first predefined entity, a second predefined entity of the plurality of predefined entities approved to sign the medical attestation;
• and
• determine, by an application, that the public key certificate chain includes a first digital signature of the second predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the second predefined entity;
• determine, based on the determination that the digital signature includes the digital signature of the second predefined entity, a medical status of a person;
• and
• transmit, to a recipient device based on the determination of the medical status of the person, an attestation result specifying the medical status of the person.

A computing apparatus comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the processor to:
• receive, from a contactless card, a medical attestation, a digital signature of the medical attestation, and a public key of the digital signature;
• extract, from the medical attestation, an encrypted identification (ID) and a counter value associated with the encrypted ID based on a rule to validate the encrypted ID of the medical attestation;
• transmit the encrypted ID and the counter value to a server to validate the encrypted ID;
• determine, based on a decryption result received from the server, that the server decrypted the encrypted ID;
• determine, by an application, that a public key certificate chain for the digital signature does not include a digital signature of a first predefined entity of a plurality of predefined entities approved to sign the medical attestation, wherein the first predefined entity is specified by a first rule of a plurality of rules;
• determine, by the application based on a second rule of the plurality of rules and the determination that the public key certificate chain does not include the digital signature of the first predefined entity, a second predefined entity of the plurality of predefined entities approved to sign the medical attestation;
• and
• determine, by the application, that the public key certificate chain includes a first digital signature of the second predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the second predefined entity;
• determine, based on the determination that the digital signature includes the digital signature of the second predefined entity, a medical status of a person;
• and
• transmit, to a recipient device based on the determination of the medical status of the person, an attestation result specifying the medical status of the person.