1 of 20

Personium Trails

Stop Pandemic using Personal Data Store (PDS)

Personium Project

in collaboration with

Code for Myself Project

April 2020

https://bit.ly/Personium-vs-COVID19

2 of 20

Personium Trails

Personium will not win the battle against Covid-19 by sacrificing your privacy!

3 of 20

Overview

Allows users to cross-check their personal location logs against anonymised location logs of infected people to determine Covid-19 exposure risk level.

  • Users store location logs privately into their PDSs
  • Users can view exposure risk analysis privately
  • When a user gets infected, he/she can share selected anonymised location log upon his/her own will

3

4 of 20

Updates

  • Apr. 8
    • Analysis of Google takeout data structure
    • Drafted screen flows
    • Experimenting Data Vault’s data from OwnYourData
  • Apr. 15
    • Start collaboration with “CodeForMyself” project (Led by Information Bank Consortium)

5 of 20

Target users: bit-worried people

  • Provide self-checking to those who went outside

5

I went for a walk last Monday just for

refreshing.

I feel a bit guilty

I don’t want people to know that.

I feel a bit sick since then.

I believe I am not infected. .. but to be very honest, ...not sure.

  • Allow worried people to cross-check location logs anonymously in order to give them clue to decide if they should go to hospital.

I may just keep it secret.

6 of 20

Target users: Infected people

  • Provide a way to disclose “anonymized location logs

6

I am diagnosed as

Covid-19 positive.

I know I should tell and warn them.

I feel guilty.

How many people have I infected ?

  • Allow infected people to share their location logs to stop the widespread of Covid-19 without being identified

And more than anything, I don’t want to let them know it was ME

But I don’t remember exact time of visit...

7 of 20

Screen Image

7

March 11th (Wed)

10:00 – 12:00 Home

12:00 – 13:00 Travalleing

13:00 – 17:00 Fuitsu Solution Square

17:00 – 18:00 Restaurant John Doe Kamata

Most likely you had contact with the infected person

18:00 – 19:00 Travelling

3/11

17:00 – 18:00 Restaurant John Doe Kamata

Trails from the infected person

Trails from the infected person who was diagnosed on 3/14.

16:30 – 17:30 Restaurant John Doe Kamata

Please go to hospital and have a full checkup.

Your trails

8 of 20

Ecosystem of Personium Trails

  • User (record location logs, determine Covid-19 exposure risk level)
  • App service (Merged all open data & shared anonymised location logs)
  • Open Data source (locations of infected cases)

8

Personium Unit

User Cell

App

service

App service Admin

User Cell

Anonymised

Location logs

Open Data

Users

- Record location logs

- View risk analysis

Open data

Hospital / Clinic

Governemnt

Open Data

Anonymised data

When infected

- Can share anonymised location logs

Open Data

9 of 20

Human-centric Control

  • Individuals manage their own data

Raw data

(date & time, GPS coordinates, & travel routes) from their mobile devices

  • Individuals can select what data to be shared
  • Individuals know what the data is for when shared

9

10 of 20

Privacy by Design

  • Location logs are not shared to anyone by default
  • Cross-check your location logs privately with app service provider’s DB (managed anonymised infected location logs)
    • Performed within user’s PDS engine
  • Delete shared data in the app service provider’s DB when sharing permission is removed
    • Optional depending on the local regulations

10

11 of 20

Permission and Transparency

  • The infected person can choose to share the anonymized location logs to the app service provider (NGO or NPO)
    • Not all location logs are shared. Only the location logs during the incubation period is to be shared.
  • View selected data in anonymised form before sharing

11

12 of 20

Candidate Data 1/2

  • Raw data from Google Map is surprisingly detailed
    • Select Timeline from the Hamburger Menu
    • This data can be downloaded as ZIP file from Google Takeout
    • The code4myself project is supposed to know the data structure of the contents of the Zip file

12

13 of 20

Candidate Data 2/2

  • Raw data from Data Vault

13

14 of 20

Call for Actions

We need your expertises.

  • iOS/Android app (frontend) developers
  • Data model and analysis
  • Anonymization process
  • UX design

14

15 of 20

MyData vs Covid-19

  • World wide news on Covid-19

16 of 20

MyData COVID-19 App List

17 of 20

18 of 20

Data Vault APIs

Data Vault Login URL: https://data-vault.eu/

Two ways to record data

1. Automatic location tracking just registers any location events on the smart phone. I.e., when ever Google Maps, or any other app on your phone queries the GPS location the OYD app just takes a copy and also stores it. This way we save the battery.

2. The button "Add Current Location Data" triggers manually in iOS and Android to get the GPS location and stores it locally (this costs additional battery!)

With "Upload Location Data Now" the cached location data on the phone is sent to the configured Data Vault (specified on the login screen) no matter if you are on a WLAN or on cellular connection. The OYD app automatically uploads data in the background the user is in a WLAN to reduce cellular cost.

Two ways to retrieve data

Use Docker image to read and decrypt data from the Data Vault.

https://hub.docker.com/r/oydeu/srv-pia_read

Use APIs to get data then decrypt data manually

https://api-docs.ownyourdata.eu/datavault/

https://doc.libsodium.org/

19 of 20

Shared URLs

20 of 20

COSCUP 2020

Stop Pandemic using Personal Data Store