Support for IPS and GDHCN in FHIREngine

[fredhersch]

The Global Digital Health Certification Network by the WHO enables a number of use-cases that leverage FHIR IPS.

We want to enable developers to be able to use the Android FHIR SDK as the underlying SDK for different use-cases.

To do this, the SDK needs to be able to manage the GDHCN keys in a secure manner.

[MJ1998]

These GDHCN keys are typically public keys used to verify digital signatures on health certificates. They correspond to private keys held by trusted certificate issuers (e.g., national health authorities).

Storing private keys on device is probably discouraged and not clear to me also as its something that is owned by national health authorities.
Is storing (& managing perhaps) public keys on android devices what you are suggesting ?
Are you also suggesting to build capabilities to sync and verify GDHCN certificates (which will be some fhir resources I guess ?) using the stored public keys ?
Is it something without our libraries won't work in the GDHCN network ? (=> I think its not a P1)