New York State Digital Credentials
My Roles
UX Design Lead and Visual Design Lead
Design Team Size
3-5 over the course of the project
Date
January 2021 – March 2023
Industry
Government
THE CHALLENGE
Designing a smart Response to a global pandemic.
New York State sought to design a system that would allow individuals to securely store and conveniently access their vaccination records via a user-friendly mobile app as well as a non-digital solution. Collaborating with privacy experts was pivotal to ensure data security while facilitating seamless verification for travel, events, and public venue entry. This approach not only streamlined verification processes but also aided in monitoring vaccination rates across regions within the state. Through partnerships between state health authorities, tech developers, and privacy advocates, New York led with a welcoming and privacy-conscious strategy that contributed not only to global pandemic management but also set a precedent for effectively handling future health crises.
THE APPROACH
The ecosystem consisted of a web portal, printed vaccination proof, a mobile wallet and a mobile scanner.
The ecosystem began with a web portal that requested a limited amount of user information along with responses to specific vaccination-related questions known only to the New York State resident. Following the successful validation of the provided details against the New York State Immunization Information System (NYSIIS), the web portal generated a W3C verifiable credential. This credential was subsequently made available for printing or could be added to the user's mobile wallet.
To ensure credential validity, we designed and built a dedicated scanner for use by businesses across the state. As patrons entered public venues, business owners could easily scan the credential, receiving an immediate response regarding its validity.
The cornerstone of our solution's design is the complete absence of internet connectivity across all associated applications once the credential was issued. This pivotal decision not only safeguarded the integrity of residents' health data but also alleviated apprehensions surrounding the new approach to reopening New York during the global pandemic.
Web Portal
Printed Pass
Digital Pass in Mobile Wallet
Pass Scanner for Businesses
THE DESIGN
The portal drove the solution with a simple flow that ensured privacy was front and center.
The ecosystem began with a web portal that requested a limited amount of user information along with responses to specific vaccination-related questions known only to the New York State resident. Following the successful validation of the provided details against the New York State Immunization Information System (NYSIIS), the web portal generated a W3C verifiable credential. This credential was subsequently made available for printing or could be added to the user's mobile wallet.
The digital wallet was designed to hold the digital credential and used to present proof of vaccination.
Upon issuance of the credential by the portal, users were given the option to seamlessly integrate it into the digital wallet, a service extended to all New York State residents. Engineered with a emphasis on privacy, this digital wallet operates without any login requirements or user-specific data. Its sole function was to securely contain the accumulated credentials. An unintended consequence of this user-neutral design was that individuals could add additional vaccine credentials, including those of others, using the QR code from the originally issued credential. This flexibility enabled, for instance, heads of households to incorporate their children's vaccine records into the wallet.
The scanner was designed to verify the digital credential upon presentation.
Upon issuance of the credential by the portal, users were given the option to seamlessly integrate it into the digital wallet, a service extended to all New York State residents. Engineered with a emphasis on privacy, this digital wallet operates without any login requirements or user-specific data. Its sole function was to securely contain the accumulated credentials. An unintended consequence of this user-neutral design was that individuals could add additional vaccine credentials, including those of others, using the QR code from the originally issued credential. This flexibility enabled, for instance, heads of households to incorporate their children's vaccine records into the wallet.
Verification States
EVOLUTION OF THE SOLUTION
We introduced an enhanced version of the pass, this time with vaccination data embedded in the credential.
I initially designed a version of a vaccination credential with embedded vaccination data for the client. Regrettably, time constraints and fears around exposing any health data whatsoever led to its rejection prior to launch, prompting us to shelve the vaccination data component at the project's outset. Later on, a new framework emerged, called the SMART Health Card. Using this framework, we introduced the new credential, incorporating embedded vaccination data, which consequently demanded a heightened level of resident security checks and assurances. To respond to these new security requirements, we integrated two-factor authentication into the portal flow immediately after the challenge questions.
Web Portal
Wallet with New Credential
THE IMPACT AND LESSONS LEARNED
New York State was the first state to embark on this journey to create a digital solution for residents to prove their vaccination status.
Over 15 million credentials were issued with minimal support issues. Most of the issues that residents faced were due to bad data entered at the time of vaccination by the pharmacies or clinics administering the vaccinations.
“New York was hit hard by COVID-19, and we have led bold efforts to pursue innovative solutions to reinvigorate economies. Excelsior Pass and Excelsior Pass Plus—the nation’s first vaccine and negative test pass system—have been critical tools in the safe reopening of our economy and the protection of New York’s public health.”
“This technology will help to ensure that vaccine verification can happen more easily and efficiently.”
“The business community is eager to get our city’s workforce back to the office, to safely re-open entertainment venues and restaurants, and much more. The Excelsior Pass is an exciting new tool that will accelerate our state’s economic recovery. It is evidence of New York’s forward-thinking approach to restoring jobs and moving beyond the pandemic.”
“I am so glad that New York State has provided us a way to fast track a safe reopening during COVID-19.”
