Protecting Australia's Border with Cryptographically Secure Credentials

GoSource delivered cryptographically verifiable border credentials that let regulators and traders trust digital trade documents without relying on paper originals.

Challenge

As the international supply chain becomes increasingly complex, the risk of fraud and crime slipping through undetected grows in tandem, posing immense risks to both the Australian population and the economy. Digitising trade processes using cryptographically secured trade documents and identity verification methods can drastically increase the difficulty of forgery and enable regulators to automate currently laborious compliance verification processes. However, a significant challenge is interoperability: international supply chains comprise many parties with varying levels of technical maturity and differing legal frameworks, making it difficult to implement any solution that mandates universal participation.

Solution

GoSource identified Decentralised Identifiers (DID) and Verifiable Credentials (VC) — W3C specifications that are cryptographically secure and instantly verifiable versions of traditional IDs and credentials — as the basis for the solution. VCs can be issued to DIDs much like a passport is issued to a citizen.

Combined with the Open Attestation framework, this approach is compatible with all levels of digital maturity, enabling asynchronous adoption. QR codes can be printed onto existing paper documents, allowing a party to scan and verify if they choose while not requiring it. Documents issued this way are cryptographically trustworthy and can be verified independently.

After a successful proof of concept between Australia and Singapore using Certificates of Origin, the ABF expanded the initiative to cover Declarations of Origin, CITES permits, and VI-1 wine certificates. GoSource built the Digital Verification Platform using Node/React and the Open Attestation library released by the Singaporean government. The platform enables the ABF to place a digital “stamp” (VC) on all documents it issues, which any third party can immediately verify as authentic.

To assist in the global uptake of VCs, GoSource contributed its work to UN/CEFACT in the form of VCKit — open source software that enables other nations to easily implement VC creation and verification tools.

Outcomes

• More secure border: Documents can be verified faster and more reliably, leading to more seizures of illegal goods and a safer Australia
• Multi-purpose platform: While built for the ABF’s particular needs, the platform can be used by almost any issuing authority
• Global collaboration: Open source VCKit software empowers worldwide integration of the technology by lowering the cost of development
• International proof of concept: Successful Australia-Singapore VC exchange for Certificates of Origin validated the approach
• Expanded scope: Platform extended from Certificates of Origin to Declarations of Origin, CITES permits, and VI-1 wine certificates
• UN/CEFACT contribution: GoSource’s work contributed to the United Nations as open source, accelerating global adoption of verifiable credentials in trade

Technologies & Methods

• W3C Decentralised Identifiers (DID) and Verifiable Credentials (VC)
• Open Attestation framework (Singapore government)
• Node.js / React (Digital Verification Platform)
• VCKit (open source VC creation and verification tooling, contributed to UN/CEFACT)
• QR code integration for backward compatibility with paper documents
• Cryptographic document signing and verification

Team Size

Not specified

Ethical Considerations

The solution was designed with interoperability and inclusiveness as core principles. By supporting asynchronous adoption through QR codes on existing paper documents, the platform does not force participants with lower digital maturity out of global supply chains. The open source contribution to UN/CEFACT reflects a commitment to equitable access, ensuring that developing nations can implement the same secure credentialing technology without prohibitive licensing costs.