WHO SMART Trust
1.1.5 - CI Build International flag

WHO SMART Trust, published by WHO. This guide is not an authorized publication; it is the continuous build for version 1.1.5 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/costateixeira/smart-trust/ and changes regularly. See the Directory of published versions

Content profiles

Trust Domains

A Trust Domain consists of:

  • Defined use cases and business processes related to the utilization of Verifiable Digital Health Certificates; These Verifiable Digital Health Certificates may be issued or verified through Trusted Services that are enabled by Trust Network Participants of the Digital Health Trust Network.
  • the open, interoperable technical specifications that identify or define the applicable Trusted Services and Verifiable Digital Health Certificates; and
  • a set of policy and regulatory standards describing expected behavior of GDHCN Participants in relation to operation of the Trusted Services and utilization of Verifiable Digital Health Certificates (e.g. data minimization, privacy, scope of use).

At the current time, the following content profiles are recognized through the WHO's Global Digital Health Certification Network (GDHCN):

Currently, the following trust domains are available:

  • DDCC: The Digital Documentation of COVID-19 Certificates (DDCC) Trust Domain covers the utilization of COVID-19 Vaccine Certificates and Test Results
  • IPS-PILGRIMAGE:implementation Guide is intended to support the utilization of variable International Patient Summary (IPS) documents during pilgrimage.
  • PH4H: currently in DRAFT, implementation guide to support the PH4H Initiative that aims to enable connected health for all people in Latin America and the Caribbean (LAC). Led by the Inter-American Development Bank (IDB), the Pan-American Health Organization (PAHO) and the countries of the region.

Digital Documentation of COVID-19 Certificates (DDCC)

The Digital Documentation of COVID-19 Certificates (DDCC) published in August 2021 and similar guidance for test results (https://www.who.int/publications/i/item/WHO-2019-nCoV-Digital_certificates_diagnostic_test_results-2022.1) published in March 2022 serve as the reference for the associated FHIR Implementation Guide. This Implementation Guide (IG) acts as the computable representation of the core data elements in the published guidance, mapped to standard terminologies. These data models, in the form of FHIR logical models, and terminologies, in the form of FHIR value sets, are the basis for interoperability between the various credential formats. The IG provides FHIR Structure Maps and Concept Maps to define transformations between supported credential formats and the core data set, which allows business rules to execute against a common set of data elements.

ddcc_vs_qr_lm

At the current time, the following content profiles are recognized through the WHO's Digital Documentation of COVID Certificates (DDCC):

  • European Union's Digital Covid Certificates (DCC) (required)
  • DIVOC (optional)
  • International Civil Aviation Organisation (ICAO) Visible Digital Seals - Non-Constrained (VDS-NC) (optional)
  • Smart Health Cards (SHC) - Immunization (optional)

Source specifications

It can be difficult to find the "source of truth" specifications for the certificate formats that are mapped to the DDCC core data sets. The references contains links to the best known documentation for each of the certificate formats listed above.

IPS Pilgrimage (IPS-Pilgrimage)

The implementation guide includes a machine-readable representation of WHO guidelines for verifiable IPS during pilgrimage. It explicitly encodes computer-interoperable logic, including data models, terminologies, and logic expressions, in a computable language to support implementation of IPS during pilgrimage usage scenario.