Iata unveils key elements of Travel Pass

The International Air Transport Association (Iata) unveiled key design elements of the Iata Travel Pass, scheduled for release early in the first quarter of 2021. Iata Travel Pass is a mobile app to help travellers easily and securely manage their travel in line with any government requirements for Covid-19 testing or vaccine information.

“Testing is the immediate solution to safely re-open borders and re-connect people. And eventually this is likely to transition to vaccination requirements. In either case, a secure system to manage Covid-19 testing or vaccination information is critical. The Iata Travel Pass is a solution that both travellers and governments can trust. And it is being built with data security, convenience and verification as top priorities,” said Alexandre de Juniac, Iata’s Director General and CEO.

Iata emphasised these priorities with three critical design elements:

1. Putting travellers in control of their personal information for top level data security and data privacy. The Iata Travel Pass stores encrypted data including verified test or vaccination results on the mobile device of the traveller. The traveller controls what information is shared from their phone with airlines and authorities. No central database or data repository is storing the information. By keeping travellers 100 per cent in control of their information, the highest standards for data privacy are ensured. Iata Travel Pass is also built on the highest standards of data protection laws, including General Data Protection Regulation (EU GDPR).

 Technically, the app is being built in accordance with Self-Sovereign Identity (SSI) principles. For iPhone it will use the Secure Enclave features of Apple devices and a similar security encryption technology for Android. 

2. Global standards recognised by governments to ensure verified identity and test/vaccine information.

a. Verified identity: A government issued ePassport is used to verify the identity of the user. It also serves to create a digital representation of the user’s passport to allow the information to be sent electronically in a secured way that is linked to their verified identity. The key to this are global standards developed by the International Civil Aviation Organization (ICAO) which match biometric passport data and a selfie taken by the user. This creates a Type 1 digital travel credential (a verified digital identify) in line with ICAO standards.

b. Verified test results or vaccine information: Currently the main vaccination requirement for entry into some countries is for yellow fever. Under the International Health Regulations, this is managed by the “yellow card” or International Certificate of Vaccination and Prophylaxis. The World Health Organization (WHO) is developing digital standards that will make these vastly more secure and will dramatically reduce fraud. When ready, the Iata Travel Pass will be able to accommodate such new global standards.

3. Convenience and biosafety will be enhanced with integration into contactless travel processes. The ICAO CART recommendations for biosafety include the use of contactless travel processes to reduce the risk of virus transmission when documents need to be exchanged in the travel process.