Thank you. Your trial account has been setup.
Click here to access your Qryptal trial account

Or you'll be redirected to your account in 10 seconds

Login Instructions have been emailed as well.
For future access to your account please check your e-mail for login details.
Thank you, you already have an account.
Please click here and login with the credentials sent via e-mail earlier
Thank you, your message had been sent.
A Qryptal representative will soon contact you.
Thank you, your message had been sent.
A Qryptal representative will soon contact you.
Thank you, your message had been sent.
A Qryptal representative will soon contact you.

4 Questions to ask before any implementation of QR Codes for Covid Lab Reports

  • Rajesh Soundararajan
  • Jun 08, 2021
  • 5 min read
4 Questions to ask before any implementation of QR Codes for Covid Lab Reports

A simple checklist for implementation

Ask yourself these 4 Questions

In our last post, we wrote about Integrating document security into COVID Test Reports and the integration challenges faced by Laboratories & Laboratory Information Systems (LIS) because of the surge in workloads.

Once we agree upon using QR codes and have crossed the first hurdle of figuring out the integration method depending on the systems and processes in use at the laboratory end, we get the next common question: “What implementation are options available”? There are four different questions to be answered to figure out the implementation option of QR codes for document security and verification.

  1.    Verified By Authorised Apps Vs. Any QR Code Reader

  2.    Offline Vs. Online Verification

  3.    Cloud Vs. On-Premise

  4.    All Covid Reports Vs. Travel Reports

1. Verified By Authorised Apps Vs. Any QR Code Reader

This is a crucial point - whether one wants universal scanning, which the name suggests is the ability for the QR code to be scanned with any QR code reader or if the scanning needs to be limited or done by authorised apps only. Universal scanning has its advantage, as people can use any QR reader on their phones. However, there is one significant disadvantage: the inability to build security in such QR codes. There is a high possibility of QR phishing. Moreover, many of these generic readers capture very sensitive personal data about the user, which is a privacy and security risk.

Scanning via authorised apps provides a simple solution that delivers the desired verification but is remarkably high security. A significant advantage of scanning via authorised apps is maintaining the privacy of the patient information and avoiding any legal issues whatsoever. Such an implementation also prevents QR phishing, which is rampant today.

Our recommendation: Go for authorised apps to scan to deliver decentralised verification while providing the highest level of security for your document.

2. Offline Vs. Online Verification

The other significant implementation decision you need to make is if your QR code validation should happen offline or online. Traditionally, online has been preferred for maintaining security, while the offline method is required in air-gapped environments and areas with flaky or unstable or zero internet.

The secure QR code technology works in both offline mode (through a self-contained code which we call PDC or primary data code at Qryptal) and online (through extended data codes or EDC). Offline PDC modes work well with COVID-19 test reports since these reports contain only textual information and are typically valid only for a few days, typically 72 hours. Hence they don’t need to be revoked or modified, which is a feature that EDC codes can handle. But is usually not required for this use case.

PDC codes work in air-gapped environments, for example, at immigration and border control. The verifier does not need to be connected online to check the document’s authenticity. Thus, such an implementation reduces the burden on your validation server. Moreover, the information is directly available on the document itself in both physical and digital format.

Our recommendation: Go for codes that support offline validation of complete details even in air-gapped environments with total security and privacy.

3. Cloud Vs. On-Premise

One of the initial decisions during implementation is whether you need to go for a cloud or an on-premise deployment. If you need the ease and speed of implementation and the ability to scale up and down as often as necessary, you should choose to go for a cloud implementation option. In cloud deployment, you would be relieved of the complexity of managing infrastructure, saving upfront investment in hardware & other costs, and IT personnel and support.

However, there might be situations where you already have a well-established IT infrastructure and personnel to manage any new systems, such as QR code integration. If that were the case, you could choose to go for on-premise deployment and optimise your infrastructure.

Our recommendation: Go for Cloud implementation that helps you start small and scale as per requirements.

4. All Covid Reports Vs. Travel Reports

And finally, one of the critical decisions on implementation that you would have to take is to have QR codes on all COVID-19 test reports or if you want to implement this only on Covid reports needed for travel and other specific purposes.

Today, we observe a constantly changing scenario of the needs of the airline industry and the immigration authorities. With rising cases of fraudulent documents, they randomly ask to look and crosscheck multiple documents to ensure the authenticity of the travellers COVID reports. If all your reports don’t carry the QR code, there is a good chance that some unscrupulous person can take the non QR coded report & modify it to dupe the authorities. Once it is known that all your Covid reports carry your QR (and a secure QR preferably), it is easy for the authorities to verify the authenticity. Hence it is prudent that you ensure QR code across all the documents you generate, rather than limit yourself to specific travel reports.

Our recommendation: Go for the ability to have secure QR on all COVID reports instead of being selective. That way, you maintain consistency while having in-built flexibility to take care of any fresh or changed requirements as you go along.

In summary, the implementation options can be listed below.

Implementation checklist

A Simple checklist to answer before implementation of QR codes

The Qryptal system offers the flexibility to implement QR codes for Covid reports depending on the answers to the above questions.

The two articles on integration and implementation will help laboratories make their Covid reports verifiable on-demand using QR codes and help their customers comply with the authorities’ requirements.

You may also be interested in -

Tags :

Suggested further reading

Integrating document security into COVID Test Reports?

Integrating document security into COVID Test Reports?

  • Jun 01, 2021
  • 4 min read

The massive increase in demand for Covid tests and resultant reports during the last 18 months ever since COVID-19 started, has led to a surge in workload on Laboratories & Laboratory Information Systems. Laboratories across the world generate thousands of certificates and reports each day – for COVID tests of different types, Chest X-Rays, Antibody tests, and now even vaccination certificates are an important document being generated by health authorities globally. The huge requirement for such tests and the associated reports and certificates is keeping the testing labs and service providers busier than ever.

Continue Reading
Did you know - there is an easy way to incorporate document security with your LIS

Did you know - there is an easy way to incorporate document security with your LIS

  • Apr 06, 2021
  • 6 min read

In our earlier post - How do you integrate secure QR code with LIS in healthcare with minimal or no changes? we had discussed using Files API for LIS. For most labs using modern LIS there is a far easier way of having document security incorporated into the lab reports. All it needs is a normal API integration which enables a secure QR code to be placed on the report for subsequent verification. This post will share a quick overview of how that can be done using Rest API and how this is applicable for physical-digital format which has several advantages over just the purely digital or purely physical approach. This is done with zero to minimal changes to the existing LIS systems and massively simplifies final tamper proof document generation and verification. The process used is a Rest API method which is a way of making outgoing API calls from the LIS itself. But first let’s see why are security and verification so important for lab reports.

Continue Reading
How do you integrate secure QR code with LIS in healthcare - making minimal or no changes ?

How do you integrate secure QR code with LIS in healthcare - making minimal or no changes ?

  • Mar 30, 2021
  • 6 min read

One of the most common problems our customers have solved for their Laboratory Information Systems (LIS) in healthcare is adding document security by integrating with Qryptal with no changes to the LIS systems and minimal changes to the overall document flow. Such methods speed up the implementation process to go live and are especially useful for systems that prefer not to make outgoing API calls from the LIS or legacy systems that are unable to do so. We have come up with a novel solution that addresses this need - Files API.

Continue Reading
WHO bearish on vaccine passports?

WHO bearish on vaccine passports?

  • Apr 13, 2021
  • 3 min read

Is unequal access to technology adding fuel to WHO’s arguments ?

Continue Reading

Secure QR Code Based Document Security Gets a Boost from the pandemic

  • Mar 25, 2021
  • 7 min read

Recently, Startup.Info caught up with Nikhil Jhingan, Co-Founder of Qryptal, about document security and interviewed him under their INNOVATORS VS COVID 19 series.

Continue Reading