Uk Jo, Yustus Eko Oktian, Donggyu Kim, Sangbong Oh · 6 authors
Contact tracing is an effective strategy to slow down the COVID-19 pandemic. However, the use of digital footprints as supportive evidences in the contact tracing process rises the privacy problems since private information must be shared to the contact tracing providers. This paper proposed a novel privacy-preserving contact tracing procedure based on zero-knowledge-range-proof and blockchain platform, which helps users to prove whether they in contact with the confirmed patient without disclosing the exact location they have visited. The blockchain is used to guarantee anonymity through the use of address as an identity, and provide strong non-repudiation from transactions. Finally, we provide a proof-of-concept implementation of our proposal using Hyperledger Fabric and smartphone application. The evaluation showed that the proposed system can work as intended with minimal processing delay.
The coronavirus, formerly known as COVID-19, has caused massive global disasters. As a precaution, most governments imposed quarantine periods ranging from months to years and postponed significant financial obligations. Furthermore, governments around the world have used cutting-edge technologies to track citizens’ activity. Thousands of sensors were connected to IoT (Internet of Things) devices to monitor the catastrophic eruption with billions of connected devices that use these novel tools and apps, privacy and security issues regarding data transmission and memory space abound. In this study, we suggest a blockchain-based methodology for safeguarding data in the billions of devices and sensors connected over the internet. Various trial secrecy and safety qualities are based on cutting-edge cryptography. To evaluate the proposed model, we recommend using an application of the system, a Raspberry Pi single-board computer in an IoT system, a laptop, a computer, cell phones and the Ethereum smart contract platform. The models ability to ensure safety, effectiveness and a suitable budget is proved by the Gowalla dataset results.
Privacy preservation in various contact tracing approaches for the COVID-19 or SARS-CoV-2 virus is challenging, as such applications tend to reveal users’ points of interest (POIs) and other sensitive data shared together with their location information. This paper proposes COVID-19 eavesdropping resistant tracing (COVERT)-Blockchain, a novel distributed-ledger-based platform to facilitate contact tracing without invading users’ privacy. COVERT-Blockchain enables infected users to share only their anonymized location traces on the Blockchain with a sliding window of the previous 15 days, thereby avoiding constant location information sharing with third party users. To further reduce the chances of revealing the corresponding users’ trajectories, in COVERT-Blockchain we employ an adaptive logging mechanism to store trajectory data for contact tracing only if the users stayed in a location where there is significant presence of other humans around them for a relatively long duration of time. This ensures anonymity where the trajectory is generated differently each time for each user, and such infrequent and random trajectory generation enables us to generate unidentifiable trajectories for each user and thus preserve their privacy. COVERT-Blockchain is evaluated for scalability and robustness in relation to overhead and delays in storing and retrieving data from the Blockchain. Results show it to efficiently achieve contact tracing without any breaches of privacy.
Contact tracing is a critical tool for restricting the transmission of any infectious disease. This basic mechanism aids in identifying and breaking the chain of transmission by separating a healthy person from an infected person. Different nations and health institutions use various contact tracing methods to identify the transmission network and control the outbreak. However, the users face severe security and privacy risks, including storing the history of their locations, personal and device information. Subsequently, this personalized information could be utilized by a cyber-attacker for malicious purposes. In this study, the privacy and security risks of contact tracing technologies are identified, and a potential secure solution is proposed based on the blockchain network. The developed model is a decentralized application (or D-App) implemented using Ethereum smart contracts. The Bluetooth technology is used to identify contacts, and their data gets stored in the blockchain. This decentralization approach of D-App makes it an ideal framework for developing contact tracing applications.
Due to its significant global impact, both domestic and international efforts are underway to cure the infection and stop the COVID-19 virus from spreading further. In resource-limited environments, overwhelmed healthcare institutions and surveillance systems are struggling to cope with this epidemic, necessitating a specific strategic response. In this study, we looked into the COVID-19 situation and to establish trust, accountability, and transparency, we employed blockchain's immutable and tamper-proof properties. We offered a smart contract (SC)-based solution (Block-HPCT) that has been successfully tested to preserve a digital health passport (DHP) for vaccine recipients; also, for contact tracing (CT) we employed proof of location concept, which aids in a swift and credible response directly from the appropriate healthcare authorities. To connect on-chain and off-chain data, trusted and registered oracles were integrated and to provide a double layer of security along with symmetric key encryption; both Interplanetary File System (IPFS) and Hyperledger Fabric were merged as storage center. We also provided a full description of the suggested solution's system design, implementation, experiment results, and evaluation (privacy and cost analysis). As per the findings, the suggested approach performed satisfactorily across all significant assessment criteria, implying that it can lead the way for practical implementations and also can be used for similar types of situations where contact tracing of infectious can be crucial.
The Coronavirus disease 2019 has manifested into a global pandemic spreading into almost all the countries and territories in the world. Contact tracing, followed by testing and isolation, have been identified as important tools in containing the proliferation of the disease. Because of manual contact tracing limitations, smartphone apps for digital contact tracing have been deployed by authorities in multiple countries. However, many of these apps have faced criticism because of interoperability, privacy and security issues. This paper proposes an open architecture based on blockchain technology that addresses some of these criticisms. It enables interoperability through a publicly-readable consortium blockchain database, preserving privacy by distributing users’ partial identities among multiple decentralised authorities and providing security through digital signature and asymmetric key encryption. In addition, the architecture provides a fast proof-of-authority based consensus algorithm using reputation as a stake to add and validate blocks on the blockchain efficiently and a swift contact tracing algorithm using Spatio-temporal and key-valued databases.
Purpose The purpose of this study is to investigate the applications of blockchain in vaccine passport solution. The world is facing an unprecedented situation because of the COVID-19 pandemic. Many countries have witnessed sporadic lockdown and travel restrictions and it has marred trade and tourism. As the mass vaccination has started the life is slowly and steadily returning to true normal. Various countries are issuing vaccination passports to manage the immunization information and validate it. To realize vaccine-passport’s true potential, security and privacy concerns should be being taken care of. There is a need for studies to evaluate the emerging technology for the vaccine passport. Design/methodology/approach This study uses a mix of qualitative and quantitative methods to achieve its objective. This study uses a systematic literature review to analyze the potential of blockchain for vaccine passports. The case study of three different types of organizations implementing blockchain for vaccine passports was analyzed and results were presented. Last but not least, focus group discussion and search of secondary literature was to done to identify scientific, ethical and legal challenges associated with the use of vaccine passports. The method used for calculating the importance score of these challenges was analytical hierarchy process. Findings This study concludes that blockchain-based solutions are very suitable for vaccine passports and addresses the concern related to interoperability, privacy and security. The case study approach was used to elaborate the use of blockchain in three different options available for the vaccine. Last but not least, this study identifies the challenges faced by vaccine passport programs and suggests measures to overcome them. This study concludes that the ethical challenges associated with vaccine passports are more important and should be preferentially treated. Research limitations/implications This study is timely and will be he lpful for policymakers in designing the vaccine passport programs. It gives valuable insight to decision-makers evaluating technologies for the development of vaccine passport programs. This study identifies nine challenges to be tackled to making a vaccine passport program successful. Originality/value To the best of the author’s knowledge, this study is not able to find out a review on the use of blockchain technology for vaccine passports, and this study attempts to fill this gap. This study further discusses the cases of organizations that have implemented blockchain technology for vaccine passport programs.
Mark Gaynor, Rhonda BeLue, Janet E. Tuttle‐Newhall, M L Martin · 6 authors
BACKGROUND: Blockchain technology has made great strides in many industries but has yet to impact the world of public health. Population health issues such as outbreak surveillance and controlled substance tracking during emergencies all require a secure, easily accessible database. While the healthcare industry is typically slow to adapt to change, blockchain technology lends itself well to many healthcare issues. METHODS: We utilized a 3D framework using difficulty, novelty and necessity to examine the adoption of blockchain technology in population health, based on the 2D framework of difficulty and novelty as driving factors for the development of foundational technologies in the world of business by Iansiti and Lakhani in The Harvard Business Review. RESULTS: We find that by implementing the third dimension of necessity into an evaluation framework, we can better predict the adoption of technology. We found how different areas of population health fit into the evaluation framework and how necessity can eliminate barriers from implementing novel technologies. CONCLUSION: The byproduct of this paper will be the extension of the Iansiti and Lakhani framework. We will show that blockchain, in all of these domains, shows promise to improve population health as we move past COVID-19 and into the future of healthcare.
Blockchain technology, recognized for its decentralized and privacy-preserving capabilities, holds potential for enhancing privacy in contact tracing applications. Existing blockchain-based contact tracing frameworks often overlook one or more critical design details, such as the blockchain data structure, a decentralized and lightweight consensus mechanism with integrated tracing data verification, and an incentive mechanism to encourage voluntary participation in bearing blockchain costs. Moreover, the absence of framework simulations raises questions about the efficacy of these existing models. To solve above issues, this article introduces a fully third-party independent blockchain-driven contact tracing (BDCT) framework, detailed in its design. The BDCT framework features an Rivest-Shamir-Adleman (RSA) encryption-based transaction verification method (RSA-TVM), achieving over 96% accuracy in contact case recording, even with a 60% probability of individuals failing to verify contact information. Furthermore, we propose a lightweight reputation corrected delegated proof of stake (RC-DPoS) consensus mechanism, coupled with an incentive model, to ensure timely reporting of contact cases while maintaining blockchain decentralization. Additionally, a novel simulation environment for contact tracing is developed, accounting for three distinct contact scenarios with varied population density. Our results and discussions validate the effectiveness, robustness of the RSA-TVM and RC-DPoS, and the low storage demand of the BDCT framework.
Domain-specific Microservice Reference Architectures (MSRA) have become relevant study objects in software technology. They facilitate the technical evaluation of service designs, compositions patterns and deployment configurations in realistic operational practice. Current knowledge about MSRA is predominantly confined to business domains with modest numbers of users per application. Due to the ongoing massive digital transformation of society, people-related online services in e-government, e-health and similar domains must be designed to be highly scalable at entire nation level at affordable infrastructure cost. With ZVAX, we present such a service in the e-health domain. Specifically, the ZVAX implementation adheres to an MSRA for pandemic-related processes such as vaccination registration and passenger locator form submission, with emphasis on selectable levels of privacy. We argue that ZVAX is valuable as study object for the training of software engineers and for the debate on arbitrary government-to-people services at scale.
In a post-pandemic era with personal precautions and vaccination, the emergence of COVID-19 variants with higher transmissibility and the socio-economic reopening have raised new challenges to existing human-to-human digital contact tracing systems, where privacy, efficiency, and energy-consumption issues are major concerns. In this article, we propose a novel blockchain-based human-to-infrastructure contact tracing framework for the post-pandemic era. Specifically, our approach collects and records the interaction information between persons and predeployed anchor nodes to trace the possible contacts with confirmed patients, so as to capture the indirect contacts and reduces the energy consumption of users. To address the privacy leakage and reliability issues in contact tracing, we introduce a self-sovereign identity (SSI) model-based blockchain which enables users to gain full control of their own identities and eliminate the linkage between the identity and location information in interaction records. To further preserve the privacy of confirmed patients, we introduce the private set intersection cardinality (PSI-CA) protocol to estimate the risk of infection by only counting the number of encounters between users and confirmed patients. Two self-executed smart contracts are deployed on the SSI blockchain to perform contact tracing, which guarantees the robustness of the system. The performance analysis validates the effectiveness of our approach.
BACKGROUND: Academic literature highlights blockchain's potential to transform health care, particularly by seamlessly and securely integrating existing data silos while enabling patients to exercise automated, fine-grained control over access to their electronic health records. However, no serious scholarly attempt has been made to assess how these technologies have in fact been applied to real-world health care contexts. OBJECTIVE: The primary aim of this paper is to assess whether blockchain's theoretical potential to deliver transformative benefits to health care is likely to become a reality by undertaking a critical investigation of the health care sector's actual experience of blockchain technologies to date. METHODS: This mixed methods study entailed a series of iterative, in-depth, theoretically oriented, desk-based investigations and 2 focus group investigations. It builds on the findings of a companion research study documenting real-world engagement with blockchain technologies in health care. Data were sourced from academic and gray literature from multiple disciplinary perspectives concerned with the configuration, design, and functionality of blockchain technologies. The analysis proceeded in 3 stages. First, it undertook a qualitative investigation of observed patterns of blockchain for health care engagement to identify the application domains, data-sharing problems, and the challenges encountered to date. Second, it critically compared these experiences with claims about blockchain's potential benefits in health care. Third, it developed a theoretical account of challenges that arise in implementing blockchain in health care contexts, thus providing a firmer foundation for appraising its future prospects in health care. RESULTS: Health care organizations have actively experimented with blockchain technologies since 2016 and have demonstrated proof of concept for several applications (use cases) primarily concerned with administrative data and to facilitate medical research by enabling algorithmic models to be trained on multiple disparately located sets of patient data in a secure, privacy-preserving manner. However, blockchain technology is yet to be implemented at scale in health care, remaining largely in its infancy. These early experiences have demonstrated blockchain's potential to generate meaningful value to health care by facilitating data sharing between organizations in circumstances where computational trust can overcome a lack of social trust that might otherwise prevent valuable cooperation. Although there are genuine prospects of using blockchain to bring about positive transformations in health care, the successful development of blockchain for health care applications faces a number of very significant, multidimensional, and highly complex challenges. Early experience suggests that blockchain is unlikely to rapidly and radically revolutionize health care. CONCLUSIONS: The successful development of blockchain for health care applications faces numerous significant, multidimensional, and complex challenges that will not be easily overcome, suggesting that blockchain technologies are unlikely to revolutionize health care in the near future.
BACKGROUND: Integrating pervasive computing with blockchain's ability to store privacy-protected mobile health (mHealth) data while providing Health Insurance Portability and Accountability Act (HIPAA) compliance is a challenge. Patients use a multitude of devices, apps, and services to collect and store mHealth data. We present the design of an internet of things (IoT)-based configurable blockchain with different mHealth apps on iOS and Android, which collect the same user's data. We discuss the advantages of using such a blockchain architecture and demonstrate 2 things: the ease with which users can retain full control of their pervasive mHealth data and the ease with which HIPAA compliance can be accomplished by providers who choose to access user data. OBJECTIVE: The purpose of this paper is to design, evaluate, and test IoT-based mHealth data using wearable devices and an efficient, configurable blockchain, which has been designed and implemented from the first principles to store such data. The purpose of this paper is also to demonstrate the privacy-preserving and HIPAA-compliant nature of pervasive computing-based personalized health care systems that provide users with total control of their own data. METHODS: This paper followed the methodical design science approach adapted in information systems, wherein we evaluated prior designs, proposed enhancements with a blockchain design pattern published by the same authors, and used the design to support IoT transactions. We prototyped both the blockchain and IoT-based mHealth apps in different devices and tested all use cases that formed the design goals for such a system. Specifically, we validated the design goals for our system using the HIPAA checklist for businesses and proved the compliance of our architecture for mHealth data on pervasive computing devices. RESULTS: Blockchain-based personalized health care systems provide several advantages over traditional systems. They provide and support extreme privacy protection, provide the ability to share personalized data and delete data upon request, and support the ability to analyze such data. CONCLUSIONS: We conclude that blockchains, specifically the consensus, hasher, storer, miner architecture presented in this paper, with configurable modules and software as a service model, provide many advantages for patients using pervasive devices that store mHealth data on the blockchain. Among them is the ability to store, retrieve, and modify ones generated health care data with a single private key across devices. These data are transparent, stored perennially, and provide patients with privacy and pseudoanonymity, in addition to very strong encryption for data access. Firms and device manufacturers would benefit from such an approach wherein they relinquish user data control while giving users the ability to select and offer their own mHealth data on data marketplaces. We show that such an architecture complies with the stringent requirements of HIPAA for patient data access.
BACKGROUND: Patient-centered health care information systems (PHSs) enable patients to take control and become knowledgeable about their own health, preferably in a secure environment. Current and emerging PHSs use either a centralized database, peer-to-peer (P2P) technology, or distributed ledger technology for PHS deployment. The evolving COVID-19 decentralized Bluetooth-based tracing systems are examples of disease-centric P2P PHSs. Although using P2P technology for the provision of PHSs can be flexible, scalable, resilient to a single point of failure, and inexpensive for patients, the use of health information on P2P networks poses major security issues as users must manage information security largely by themselves. OBJECTIVE: This study aims to identify the inherent security issues for PHS deployment in P2P networks and how they can be overcome. In addition, this study reviews different P2P architectures and proposes a suitable architecture for P2P PHS deployment. METHODS: A systematic literature review was conducted following PRISMA (Preferred Reporting Items for Systematic Reviews and Meta-Analyses) reporting guidelines. Thematic analysis was used for data analysis. We searched the following databases: IEEE Digital Library, PubMed, Science Direct, ACM Digital Library, Scopus, and Semantic Scholar. The search was conducted on articles published between 2008 and 2020. The Common Vulnerability Scoring System was used as a guide for rating security issues. RESULTS: Our findings are consolidated into 8 key security issues associated with PHS implementation and deployment on P2P networks and 7 factors promoting them. Moreover, we propose a suitable architecture for P2P PHSs and guidelines for the provision of PHSs while maintaining information security. CONCLUSIONS: Despite the clear advantages of P2P PHSs, the absence of centralized controls and inconsistent views of the network on some P2P systems have profound adverse impacts in terms of security. The security issues identified in this study need to be addressed to increase patients' intention to use PHSs on P2P networks by making them safe to use.
Mohamed Torky, Essam Goda, Václav Snåšel, Aboul Ella Hassanien
The fight against the COVID-19 pandemic still involves many struggles and challenges. The greatest challenge that most governments are currently facing is the lack of a precise, accurate, and automated mechanism for detecting and tracking new COVID-19 cases. In response to this challenge, this study proposes the first blockchain-based system, called the COVID-19 contact tracing system (CCTS), to verify, track, and detect new cases of COVID-19. The proposed system consists of four integrated components: an infection verifier subsystem, a mass surveillance subsystem, a P2P mobile application, and a blockchain platform for managing all transactions between the three subsystem models. To investigate the performance of the proposed system, CCTS has been simulated and tested against a created dataset consisting of 300 confirmed cases and 2539 contacts. Based on the metrics of the confusion matrix (i.e., recall, precision, accuracy, and F1 Score), the detection evaluation results proved that the proposed blockchain-based system achieved an average of accuracy of 75.79% and a false discovery rate (FDR) of 0.004 in recognizing persons in contact with COVID-19 patients within two different areas of infection covered by GPS. Moreover, the simulation results also demonstrated the success of the proposed system in performing self-estimation of infection probabilities and sending and receiving infection alerts in P2P communications in crowds of people by users. The infection probability results have been calculated using the binomial distribution function technique. This result can be considered unique compared with other similar systems in the literature. The new system could support governments, health authorities, and citizens in making critical decisions regarding infection detection, prediction, tracking, and avoiding the COVID-19 outbreak. Moreover, the functionality of the proposed CCTS can be adapted to work against any other similar pandemics in the future.
Bhaskara S. Egala, Ashok Kumar Pradhan, Venkataramana Badarla, Saraju P. Mohanty
The recent COVID-19 outbreak highlighted the requirement for a more sophisticated healthcare system and real-time data analytics in the pandemic mitigation process. Moreover, real-time data plays a crucial role in the detection and alerting process. Combining smart healthcare systems with accurate real-time information about medical service availability, vaccination, and how the pandemic is spreading can directly affect the quality of life and economy. The existing architecture models are become inadequate in handling the pandemic mitigation process using real-time data. The present models are server-centric and controlled by a single party, where the management of confidentiality, integrity, and availability (CIA) of data is doubtful. Therefore, a decentralised user-centric model is necessary, where the CIA of user data is assured. In this paper, we have suggested a decentralized blockchain-based pandemic detection and assistance system (iBlock). The iBlock uses robust technologies like hybrid computing and IPFS to support system functionality. A pseudo-anonymous personal identity is introduced using H-PCS and cryptography for anonymous data sharing. The distributed data management module guarantees data CIA, security, and privacy using cryptography mechanisms. Furthermore, it delivers useful intelligent information in the form of suggestions and alerts to assist the users. Finally, the iBlock reduces stress on healthcare infrastructure and workers by providing accurate predictions and early warnings using AI/ML.
Wei Yan Ng, Tien-En Tan, Prasanth V H Movva, Andrew Hao Sen Fang · 12 authors
The COVID-19 pandemic has had a substantial and global impact on health care, and has greatly accelerated the adoption of digital technology. One of these emerging digital technologies, blockchain, has unique characteristics (eg, immutability, decentralisation, and transparency) that can be useful in multiple domains (eg, management of electronic medical records and access rights, and mobile health). We conducted a systematic review of COVID-19-related and non-COVID-19-related applications of blockchain in health care. We identified relevant reports published in MEDLINE, SpringerLink, Institute of Electrical and Electronics Engineers Xplore, ScienceDirect, arXiv, and Google Scholar up to July 29, 2021. Articles that included both clinical and technical designs, with or without prototype development, were included. A total of 85 375 articles were evaluated, with 415 full length reports (37 related to COVID-19 and 378 not related to COVID-19) eventually included in the final analysis. The main COVID-19-related applications reported were pandemic control and surveillance, immunity or vaccine passport monitoring, and contact tracing. The top three non-COVID-19-related applications were management of electronic medical records, internet of things (eg, remote monitoring or mobile health), and supply chain monitoring. Most reports detailed technical performance of the blockchain prototype platforms (277 [66·7%] of 415), whereas nine (2·2%) studies showed real-world clinical application and adoption. The remaining studies (129 [31·1%] of 415) were themselves of a technical design only. The most common platforms used were Ethereum and Hyperledger. Blockchain technology has numerous potential COVID-19-related and non-COVID-19-related applications in health care. However, much of the current research remains at the technical stage, with few providing actual clinical applications, highlighting the need to translate foundational blockchain technology into clinical use.
Yazeed Alabdulkarim, Abdulmajeed Alameer, Mohammed Almukaynizi, Abdulaziz Almaslukh
The COVID-19 pandemic has caused many countries around the globe to put strict policies and measures in place in an attempt to control the rapid spread of the virus. These measures have affected economic activities and have impacted a broad range of businesses, such as international traveling, restaurants, and shopping malls. As COVID-19 vaccination efforts progress, countries are starting to relax international travel constraints and permit passengers from certain destinations to cross the border. Moreover, travelers from those destinations are likely required to provide certificates of vaccination results or negative COVID-19 tests before crossing the borders. Implementing these travel guidelines requires sharing information between countries, such as the number of COVID-19 cases and vaccination certificates for travelers. In this paper, we introduce SPIN, a framework leveraging a permissioned blockchain for sharing COVID-19 information between countries. This includes public data, such as the number of vaccinated people, and private data, such as vaccination certificates for individuals. Additionally, we employ cancelable fingerprint templates to authenticate private information about travelers. We analyze the framework from scalability, efficiency, security, and privacy perspectives. To validate our framework, we provide a prototype implementation using the Hyperledger Fabric platform.
Shahzaib Tahir, Hasan Tahir, Ali Sajjad, Muttukrishnan Rajarajan · 5 authors
The outbreak of the COVID-19 virus has caused widespread panic and global initiatives are geared towards treatment and limiting its spread. With technological advancements, several mechanisms and mobile applications have been developed that attempt to trace the physical contact made by a person with someone who has been tested COVID-19 positive. While designing these apps, user's privacy has been an afterthought and has resulted in mass violations of privacy of the public and the patients. A total of 32 countries have designed apps and rely on them as a strategy to flatten the pandemic curve. Along with lack of privacy, these methodologies are centralized, where they are fully controlled by the government and the healthcare providers. Owing to these and many other concerns, people are hesitant in the adoption of these technologies. This paper presents a detailed analysis of user tracking apps belonging to 32 countries, thus demonstrating that they collect personal data and are a gross violation of user privacy. This paper presents a novel architecture for the efficient, effective and privacy-preserving contact tracing of COVID-19 patients using blockchain. The proposed architecture preserves the privacy of individuals and their contact history by encrypting all the data specific to an individual using a privacy-preserving Homomorphic encryption scheme and storing it on a permissioned blockchain network. The contacts made with a COVID-19 positive patient are identified by performing search queries directly over the Homomorphic encrypted data stored in the blocks. Therefore, only those contacts that are suspected to be COVID-19 positive may be decrypted by the healthcare professional or government for further contact tracing/diagnosis and COVID-19 testing; thereby leading to enhanced privacy.
AKM Bahalul Haque, Bilal Naqvi, A. K. M. Najmul Islam, Sami Hyrynsalmi
The COVID-19 pandemic has shaken the world and limited work/personal life activities. Besides the loss of human lives and agony faced by humankind, the pandemic has badly hit different sectors economically, including the travel industry. Special arrangements, including COVID test before departure and on arrival, and voluntary quarantine, were enforced to limit the risk of transmission. However, the hope for returning to a normal (pre-COVID) routine relies on the success of the current COVID vaccination drives administered by different countries. To open for tourism and other necessary travel, a need is realized for a universally accessible proof of COVID vaccination, allowing travelers to cross the borders without any hindrance. This paper presents an architectural framework for a GDPR-compliant blockchain-based COVID vaccination passport (VacciFi), whilst considering the relevant developments, especially in the European Union region.