How is this different from a passport photo upload for verification?
Unlike photo-based Passport verification (which can easily be faked with AI), Yumipass app cryptographically verifies the digital signatures inside the Passport’s NFC chip. This ensures:- The Passport is real and not a forgery.
– The identity data has not been altered.
– The Passport is issued by a legitimate authority.
Why the app suggests to scan Passport with camera?
The Camera is only used to scan the NFC chip access code (similar to PIN), not any personal details.User may also manually enter the NFC chip access code, but where a debit card has 4 digit PIN, Passport may have up to 20 digit “PIN”, making camera more convenient.
What is NFC chip access code?
Think of the NFC chip access code like unlocking a bank card with a PIN. Just as you need to enter a PIN to use a debit card, the Passport’s NFC chip requires a special access key—printed as a Machine Readable Zone (MRZ) or Card Access Number (CAN).This prevents unauthorised scanning of Passport by ensuring that only someone who physically sees the document can access its NFC chip. Without this code, the chip remains locked and unreadable, just like a bank card without its PIN.
Does a user have to first upload Passport to app Wallet to use it?
No. Wallet is optional and only for convenience, so that user won’t have to NFC scan Passport on every verification.
Is the Passport data stored or shared anywhere?
No. Yumipass app performs on-device cryptographic verification and only transmits data if user approves a request from an online service that needs to verify the user’s identity.User may save verified Passport to the Yumipass app Wallet to avoid having to NFC re-scan the Passport in every verification, but this indeed is optional and for convenience only.
Does a user need to register an account in Yumipass?
No. There are no end user accounts in the Yumipass service, therefore no PII data gets stored in the service. Yumipass is not a controller, only an identity claims processor, a secure peer-to-peer service to broker verified identity claims.