Health Card
Your real AHCS card — QR carries a secure rotating token, never your records.
Loading your card…
What your QR actually carriesThe QR encodes a gateway URL with a secure rotating token — not your medical data. Scanning it opens a backend-verified emergency view showing only the minimum: name, UHID, blood group. Every scan is logged and visible in your audit trail.
How rotation protects you
- Each token is 256-bit CSPRNG — unique per patient, impossible to guess.
- The server stores only a hash; the raw token exists solely inside your QR.
- Rotating revokes every older token instantly — lost printed cards stop working.
- Revoked, expired or blocked states always fail closed at the gateway.