# Offline identity verification bridge for MOSIP + FHIR — looking for architectural feedback

**URL:** https://community.mosip.io/t/offline-identity-verification-bridge-for-mosip-fhir-looking-for-architectural-feedback/2905
**Category:** General
**Tags:** esignet
**Created:** [September 25, 2026, 4:46am UTC](https://community.mosip.io/t/offline-identity-verification-bridge-for-mosip-fhir-looking-for-architectural-feedback/2905 "2026-09-25T04:46:27Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Arfan\_Eliyas](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/arfan_eliyas/32/2123_2.png) [@Arfan\_Eliyas](https://community.mosip.io/u/Arfan_Eliyas)
#### Post date: [September 25, 2026, 4:46am UTC](https://community.mosip.io/t/offline-identity-verification-bridge-for-mosip-fhir-looking-for-architectural-feedback/2905/1 "2026-09-25T04:46:27Z")

</div>

Hi all,

I’ve been working through a problem that keeps coming up in rural health deployments: clinics with MOSIP-based national ID (specifically thinking about Ethiopia’s Fayda rollout) often have unreliable or zero connectivity, which breaks cloud-dependent identity verification exactly when it’s needed most.

I put together an open-source architectural spec exploring one approach — offline signature verification of signed ID tokens using a pre-loaded public key bundle, translation into HL7 FHIR Patient resources, and a store-and-forward sync queue for when connectivity returns.

It’s explicitly a spec/PoC, not production code, and I’ve tried to be upfront about its limitations — there’s a dedicated threat-model doc covering things like offline revocation lag, clock trust, and key rotation gaps that I don’t think this architecture fully solves yet.

I’d genuinely value critique from people closer to MOSIP internals than I am — particularly on whether the offline verification approach is realistic given how Claim 169 / CWT tokens actually work in practice, and whether the FHIR mapping holds up against real-world eSignet payloads.

Repo: [[https://github.com/arfaneliyas1/mosip-fhir-offline-bridge\](https://github.com/arfaneliyas1/mosip-fhir-offline-bridge%5C)]  
Threat model specifically, if you want to skip straight to the interesting part: `docs/05-threat-model.md`

Open to being told this is wrong in interesting ways.