- Joined
- Mar 31, 2020
- Messages
- 9,153
- Points
- 113
Ubirch and IBM are awarded the contract for German digital vaccination certificate
The "secret competition" of the Ministry of Health for a digital vaccination certificate for Germany has been decided. The Cologne-based provider Ubirch relies on QR codes and blockchain verification. On board: IT giant IBM.
29 companies had been contacted by the Federal Ministry of Health, in the context of a "negotiation procedure without participation competition", which was initially also interpreted as a "secret competition". The best offer for digital vaccination detection for all those who are vaccinated against Covid-19 were sought. The offer deadline was just five days, seven companies participated. The Cologne-based company Ubirch (51 percent) with its blockchain-based system and IBM (49 percent) were now awarded the contract, as the SPIEGEL learned from Ubirch.
A digital vaccination certificate already exists in Israel. In China, certificates have been available since Monday via the online service WeChat, which display vaccinations and test results. The EU Commission wants to on the 17th March present a draft law for a "digital green passport", which contains information on corona vaccinations, Covid-19 diseases and negative tests, thereby facilitating the lifting of travel restrictions. The German solution should be compatible with the European specifications.
Technically, the Ubirch system works like this: Every vaccinated person receives a QR code in the vaccination center or at the family doctor - on a plastic card or a piece of paper, by mail or app. The QR code is an anonymous fingerprint that is generated from personal data such as the name and the information on the vaccination date, the vaccine used and a random number and is therefore not to be recalculated. It is cryptographically signed and stored in a total of five blockchains for reasons of redundancy.
When reading the QR code, for example when crossing the border or when accessing an event, the controlling person sees the name and the other data and can, if necessary, compare them with an identity card. In the background, however, the verification system only asks whether there is an entry matching the QR code in the blockchain of the Ubirch system. Personal data and vaccination data are not stored centrally in the system in this way.
According to Ubirch, the biggest advantages are, in addition to data protection, speed and counterfeit protection. Entries in the classic yellow vaccination certificate are often difficult to decipher and easy to forge. However, the security researcher and journalist Hanno Böck had succeeded in outwiting the Ubirch system with fake QR codes, albeit with certain restrictions. The problem should now be solved.
Runs in eight weeks
Ubirch CEO Stephan Noller told SPIEGEL: "I think it's cool that this time not just some established big-tech company delivers the solution, but a clever combination of big-tech and start-ups." Ubirch cooperates with Govdigital, a cooperative of 15 IT service providers from the federal states and municipalities as well as the Federal Printing House. Noller also regards the merger as a start-up, just as a "local one". Govdigital provides one of the blockchains used.
According to Noller, IBM will, among other things, develop further apps for the system and promote the connection of the system to the medical practices.
So far, the Ubirch system has only been used in two districts: Altötting in Upper Bavaria and in the Zollernalbkreis in Baden-Württemberg. According to the Ministry of Health, it should be operational nationwide within eight weeks.
According to the tender, the contract has a total volume of 2.7 million euros.
Note: In an earlier version of this article, it was stated that no personal data would be visible and matched when checking the QR code - for example, when crossing the border. That's not right, we have corrected the passage.
»Geheimwettbewerb« des Gesundheitsministeriums: Ubirch und IBM erhalten Zuschlag für digitalen Impfnachweis
The "secret competition" of the Ministry of Health for a digital vaccination certificate for Germany has been decided. The Cologne-based provider Ubirch relies on QR codes and blockchain verification. On board: IT giant IBM.
29 companies had been contacted by the Federal Ministry of Health, in the context of a "negotiation procedure without participation competition", which was initially also interpreted as a "secret competition". The best offer for digital vaccination detection for all those who are vaccinated against Covid-19 were sought. The offer deadline was just five days, seven companies participated. The Cologne-based company Ubirch (51 percent) with its blockchain-based system and IBM (49 percent) were now awarded the contract, as the SPIEGEL learned from Ubirch.
A digital vaccination certificate already exists in Israel. In China, certificates have been available since Monday via the online service WeChat, which display vaccinations and test results. The EU Commission wants to on the 17th March present a draft law for a "digital green passport", which contains information on corona vaccinations, Covid-19 diseases and negative tests, thereby facilitating the lifting of travel restrictions. The German solution should be compatible with the European specifications.
Technically, the Ubirch system works like this: Every vaccinated person receives a QR code in the vaccination center or at the family doctor - on a plastic card or a piece of paper, by mail or app. The QR code is an anonymous fingerprint that is generated from personal data such as the name and the information on the vaccination date, the vaccine used and a random number and is therefore not to be recalculated. It is cryptographically signed and stored in a total of five blockchains for reasons of redundancy.
When reading the QR code, for example when crossing the border or when accessing an event, the controlling person sees the name and the other data and can, if necessary, compare them with an identity card. In the background, however, the verification system only asks whether there is an entry matching the QR code in the blockchain of the Ubirch system. Personal data and vaccination data are not stored centrally in the system in this way.
According to Ubirch, the biggest advantages are, in addition to data protection, speed and counterfeit protection. Entries in the classic yellow vaccination certificate are often difficult to decipher and easy to forge. However, the security researcher and journalist Hanno Böck had succeeded in outwiting the Ubirch system with fake QR codes, albeit with certain restrictions. The problem should now be solved.
Runs in eight weeks
Ubirch CEO Stephan Noller told SPIEGEL: "I think it's cool that this time not just some established big-tech company delivers the solution, but a clever combination of big-tech and start-ups." Ubirch cooperates with Govdigital, a cooperative of 15 IT service providers from the federal states and municipalities as well as the Federal Printing House. Noller also regards the merger as a start-up, just as a "local one". Govdigital provides one of the blockchains used.
According to Noller, IBM will, among other things, develop further apps for the system and promote the connection of the system to the medical practices.
So far, the Ubirch system has only been used in two districts: Altötting in Upper Bavaria and in the Zollernalbkreis in Baden-Württemberg. According to the Ministry of Health, it should be operational nationwide within eight weeks.
According to the tender, the contract has a total volume of 2.7 million euros.
Note: In an earlier version of this article, it was stated that no personal data would be visible and matched when checking the QR code - for example, when crossing the border. That's not right, we have corrected the passage.
»Geheimwettbewerb« des Gesundheitsministeriums: Ubirch und IBM erhalten Zuschlag für digitalen Impfnachweis