Sunday 28 November 2021
Select a region
News

Security fears force closure of new digital vaccine passport platform

Security fears force closure of new digital vaccine passport platform

Thursday 21 October 2021

Security fears force closure of new digital vaccine passport platform


Jersey's new digital vaccine passport platform was forced to close just hours after launching due to security concerns.

Government workers and Microsoft were said to be "urgently" working on a solution to what has been described as an "exploit" with privacy controls, and continued overnight.

There is no sign of a data leak. The issue was that anyone with the date of birth and social security number of another islander would be able to access their vaccine certificates.

A Government spokesperson said last night: “We have been made aware of an exploit with the privacy controls of our Digital COVID Status Certificate platform.

“This raises a security flaw and so we have closed the platform.

“Officers and Microsoft are urgently looking into this and an update will be given once a solution has been found.”

vax.png

Pictured: How the site currently looks to anyone attempting to access it.

In an update this morning, they added: “Officials have been working through the night with Microsoft to investigate the system flaw raised yesterday evening.

“This flaw does not lie with Yoti, but is rather a loophole with the platform that would allow someone with the date of birth and social security number of another Islanders to access their vaccine certificates. 

“We are continuing to work with Microsoft to close this loophole and make the platform available again.”  

The platform for islanders to access new digital covid status certificates that could be used within England, Scotland and Wales, and in line with France's Pass Sanitaire scheme, launched earlier yesterday evening.

The digital record aimed to show islanders' full vaccination record, accompanied by QR codes that are valid for 30 days evidencing first and second vaccine doses. QR codes evidencing a booster vaccine are also expected to become available once they are developed by NHSx. 

To access the certificates, islanders had to be registered to Yoti and have a OneGov account.

Chief Minister Senator John Le Fondré said he hoped that Jersey's QR codes would be able to be used for travel in the rest of Europe in the "near future", once the UK has joined the EU Digital Covid Certificate Gateway.

Follow Express for updates...

Sign up to newsletter

 

Comments

Comments on this story express the views of the commentator only, not Bailiwick Publishing. We are unable to guarantee the accuracy of any of those comments.

Once your comment has been submitted, it won’t appear immediately. There is no need to submit it more than once. Comments are published at the discretion of Bailiwick Publishing, and will include your username.

Posted by Scott Mills on
Ha ha ha, absolute classic!!! Can't even script (pardon the pun). Jersey global leaders in everything that is secure on this island. Perhaps the lesser secure paper version maybe better way of moving forward. Why not ask the experts at Digital Jersey or better still approach the former IT guru that is Deputy Wickenden. Sunny beaches today.
Posted by gordon le claire on
AND HOW MUCH HAS THIS COST THE TAXPAYER SO FAR
Posted by Jon Jon on
Certainly not putting that on my phone ,just show your certificate.
Posted by anthony turmel on
could only happen here folks..an app for this..an app for that,we need an app to replace this government..fast..scenery looks lovely to-day.
To place a comment please login

You have landed on the Bailiwick Express website, however it appears you are based in . Would you like to stay on the site, or visit the site?