Overview

Pioneering Verifiable Credential Validation with Inji Verify

Inji Verify stands out as a robust verification tool specifically designed to validate the verifiable credentials encoded in QR codes through an intuitive web portal interface. The process involves decoding the data stored within the QR code using the PixelPass library and subsequently validating the verifiable credential. These credentials represent a digitally secured version of both traditional paper and digital credentials, ensuring a secure and reliable method of verification across various industries and use cases.

Certainly! Here's how the use cases for Inji Verify can be presented as given below:

Use-Case	Description
Education Sector	Digital Certificates: Verify academic achievements and certificates issued by educational institutions using QR codes.
	Transcripts: Easily verify academic records and transcripts encoded in QR codes for admissions and employment purposes.
Healthcare Industry	Medical Records: Securely verify patient medical records through QR codes, ensuring accuracy and privacy in healthcare settings.
	Prescription Verification: Verify prescriptions digitally encoded in QR codes to prevent errors and ensure medication safety.
Employment Verification	Employee Credentials: The issued QR codes with verifiable employment credentials like job roles, certifications, and performance evaluations for HR verification.
Government Services	Identity Verification: Provide digital IDs and licenses in QR codes for secure identity verification in government services and benefits access.
	Permits and Licenses: Verify permits, licenses, and regulatory compliance through QR codes, reducing administrative burdens.
Financial Transactions	Banking Verification: Verify banking statements and financial records through QR codes for enhanced security in financial transactions.
Event Ticketing	Digital Tickets: Use QR codes as digital tickets for events, concerts, and conferences to verify ticket validity and prevent unauthorized entry.
Supply Chain Management	Product Authentication: Verify the authenticity and origin of products throughout the supply chain using QR codes, combating counterfeiting.
Travel and Hospitality	Digital Passports: Use QR codes as digital passports or travel documents to facilitate seamless border control and verify traveler identities.

In each scenario, Inji Verify leverages QR codes embedded with verifiable credentials to ensure secure and efficient verification across diverse sectors and applications.

Key Components of Verifiable Credentials:

1. Credential Metadata: Includes essential properties like the credential identifier, expiry date, and issuer information, all cryptographically signed by the issuer.

2. Claims: Immutable set of claims made about the credential subject, such as employee number and job title.

3. Proofs: Utilizes cryptographic methods to verify the data source and ensure data integrity.

Benefits of Using Inji Verify for Seamless and Secure Credential Verification:

• Interoperability:

  • Inji Verify integrates seamlessly with a wide range of existing platforms, including employee portals, health portals, agricultural portals, and more. It can be added as an additional layer to existing verifier systems, ensuring smooth interaction between users, and verifiers across different platforms and verification frameworks. This flexibility enhances compatibility and streamlines the verification process without disrupting current systems.

• Modularity:

  • The modular design of Inji Verify allows for easy customization and the addition of new features, ensuring flexibility to adapt to specific industry needs.

  • Each module functions independently, enabling seamless updates and scalability without affecting the core functionality of the system.

• Enhanced Security with Verifiable QR Codes:

  • Verifiable QR codes utilize digital signatures to safeguard the authenticity and integrity of the data, ensuring secure handling of sensitive information such as personal IDs, financial records, and medical data.

• Seamless PixelPass library Integration:

  • The integration of the PixelPass library enables Inji Verify to efficiently decode CBOR-encoded QR codes, ensuring a smooth and reliable verification process.
• Optimized Device Requirements for Scanning:

  • To ensure accurate and reliable verification, devices used for scanning QR codes should meet certain criteria, including:

    • A camera with at least 12 megapixels and 1020p quality.

    • Scanning without visual effects or enhancements.

    • Browser compatibility for camera access.

    • Adequate lighting conditions without filters or dark mode.

• QR Code Version Compatibility:

  • For successful verification using the scan feature, the verifiable credential (VC) should be encoded in QR code versions 27 and below.

Usage of Inji Verify:

Inji Verify offers a comprehensive set of features tailored to meet the verification needs of both users and relying parties:

• QR Code Scanning: Users can easily scan QR codes embedded within documents using their devices.

• QR Code Uploading: Alternatively, users can upload QR codes or documents which has the QR code printed on them for verification, providing flexibility in the verification process.

• Verifying QR Codes Using OpenID4VP Standards(Online Sharing):

  • Streamlined Credential Sharing: Inji Verify uses OpenID4VP standards for online sharing, embedding a URL in the QR code instead of dense Verifiable Credentials (VCs).

  • Efficient Scanning: Users can scan the QR code, which points to a secure VC storage location like Inji Web or any similar portal like Inji Web which adheres to OpenIDVP standards.
  • Secure Authorization Flow: Upon scanning, Inji Verify initiates an authorization request, retrieving and verifying the credential securely from Inji Web.

  • Cross-Device Sharing: Supports cross-device sharing, reducing QR code complexity and enabling seamless verification.

  • Enhanced User Experience: Simplifies the verification process, ensuring efficient and secure credential validation.

• Online Verification using OpenID4VP Flow: Inji Verify streamlines online verification with the OpenID4VP flow. The verifier generates an Authorization Request, presented as a QR code, which the user scans with their digital wallet, such as Inji Wallet. This method employs the vp_token response type and direct_post response mode to securely exchange credentials. To maintain a compact and secure QR code, the Authorization Request contains only a Request URI, allowing the wallet to fetch the complete request data. This process ensures users can privately and securely provide cryptographic proof of their credentials.

Note: Currently the scope of VCs that can be verified are:

• VCs adhering to W3C VC Data Model 1.1 and 2.0 standards, promoting interoperability and adherence to industry specifications.

• Algorithms supported: Ed25519 Verification Key 2018, Ed25519 Verification Key 2020, RSA Verification Key 2018

• VC format support: JSON-LD

• Verification methods supported:

  • verificationMethod is did:web and in combination with proofValue or jws

  • verificationMethod is https:// and in combination with proofValue or jws

Future Implementations Planned for Inji Verify

• Offline Verification using BLE Technology: Future updates will also include the ability to verify credentials offline using Bluetooth Low Energy (BLE) technology, adhering to OpenID standards. This approach is designed for environments where internet connectivity is limited or unavailable. Holders can share their credentials with verifiers via BLE, allowing for quick and secure credential validation without the need for an online connection. This offline solution will ensure flexibility and accessibility in remote or network-constrained areas, expanding the use cases for Inji Verify in various sectors.

Conclusion

Inji Verify is a powerful tool for securely verifying credentials encoded in QR codes. With an easy-to-use interface and features like QR code scanning, file uploads, and support for CBOR encoded and JSON-LD QR codes via PixelPass, it provides reliable credential verification across industries. Using cryptographic methods and standardized formats, Inji Verify ensures the authenticity of credentials, making verification simple and trustworthy for both users and service providers. Future updates will include offline verification, and enhancing security and privacy with advanced OpenID standards.