EUVABECO Implementation plans

EUROPEAN VACCINATION CARD (EVC) - VERIFICATION

Characteristics to be checked

For the EHR system

Compliant implementations must be able to read EVCs provided from any other compliant system, and to write EVCs that can be read from other systems.

The ability to read can be checked against the EVC samples exposed from different implementations.

The ability to write can be checked:

• Against the local EVC encoder and decoder for the PDF metadata, and possibly the QR Code content retrieved with an independent QR Code reader.
• Or with the simplistic QR Code reader.

For the signature server

The maximal throughput of the signature server should be measured with a load testing tool such as Locust. It should be above 100 EVCs per second.

The signature server should be graded A or above using Qualys SSL Server Test.

The digital signature operator should run an information security management system certified against ISO 27001, encompassing the service of signature of the EVCs.

Verification resources

Resource	URL
Implementation of an EVC scanner	https://github.com/EUVABECO/evc_scan https://evc.euvabeco.eu/
Standalone encoder and decoder	https://github.com/EUVABECO/EVC-generator
EVC samples	https://github.com/EUVABECO/implementation-plans/tree/main/5-EVC/Resources/EVC%20samples

##