A coalition of EU scientists and technologists that’s developing what’s billed as a “privacy-preserving” standard for Bluetooth-based proximity tracking, as a proxy for COVID-19 infection risk, wants Apple and Google to make changes to an API they’re developing for the same overarching purpose.

The Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT) uncloaked on April 1, calling for developers of contact tracing apps to get behind a standardized approach to processing smartphone users’ data to coordinate digital interventions across borders and shrink the risk of overly intrusive location-tracking tools gaining momentum as a result of the pandemic.

PEPP-PT said today it has seven governments signed up to apply its approach to national apps, with a claimed pipeline of a further 40 in discussions about joining.

“We now have a lot of governments interacting,” said PEPP-PT’s Hans-Christian Boos, speaking during a webinar for journalists. “Some governments are publicly declaring that their local applications will be built on top of the principles of PEPP-PT and also the various protocols supplied inside this initiative.

“We know of seven countries that have already committed to do this — and we’re currently in conversation with 40 countries that are in various states of onboarding.”

Boos said a list of the governments would be shared with journalists, though at the time of writing we haven’t seen it. But we’ve asked PEPP-PT’s PR firm for the info and will update this report when we get it.

“The pan-European approach has worked,” he added. “Governments have decided at a speed previously unknown. But with 40 more countries in the queue of onboarding we definitely have outgrown just the European focus — and to us this shows that privacy as a model and as a discussion point… is a statement and it is something that we can export because we’re credible on it.”

Paolo de Rosa, the CTO at the Ministry of Innovation Technology and Digital Transformation for the Italian government, was also on the webinar — and confirmed its national app will be built on top of PEPP-PT.

“We will have an app soon and obviously it will be based on this model,” he said, offering no further details.

PEPP-PT’s core “privacy-preserving” claim rests on the use of system architectures that do not require location data to be collected. Rather devices that come near each other would share pseudonymized IDs — which could later be used to send notifications to an individual if the system calculates an infection risk has occurred. An infected individual’s contacts would be uploaded at the point of diagnosis — allowing notifications to be sent to other devices with which had come into contact.

Boos, a spokesman for and coordinator of PEPP-PT, told TechCrunch earlier this month the project will support both centralized and decentralized approaches. The former meaning IDs are uploaded to a trusted server, such as one controlled by a health authority; the latter meaning IDs are held locally on devices, where the infection risk is also calculated — a backend server is only in the loop to relay info to devices.

It’s just such a decentralized contacts tracing system that Apple and Google are collaborating on supporting — fast-following PEPP-PT last week by announcing a plan for cross-platform COVID-19 contacts tracing via a forthcoming API and then a system-wide (opt-in) for Bluetooth-based proximity tracking.

That intervention, by the only two smartphone platforms that matter when the ambition is mainstream adoption, is a major development — putting momentum behind decentralized contacts tracing for responding digitally to the coronavirus crisis in the Western world, certainly at the platform level.

In a resolution passed today the European parliament also called for a decentralized approach to COVID-19 proximity tracking.

MEPs are pushing for the Commission and Member States to be “fully transparent on the functioning of contact tracing apps, so that people can verify both the underlying protocol for security and privacy and check the code itself to see whether the application functions as the authorities are claiming.” (The Commission has previously signaled a preference for decentralization too.)

However, backers of PEPP-PT, which include at least seven governments (and the claim of many more), aren’t giving up on the option of a “privacy-preserving” centralized option — which some in their camp are dubbing “pseudo-decentralized” — with Boos claiming today that discussions are ongoing with Apple and Google about making changes to their approach.

As it stands, contacts tracing apps that don’t use a decentralized infrastructure won’t be able to carry out Bluetooth tracking in the background on Android or iOS — as the platforms limit how general apps can access Bluetooth. This means users of such apps would have to have the app open and active all the time for proximity tracking to function, with associated (negative) impacts on battery life and device usability.

There are also (intentional) restrictions on how contacts tracing data could be centralized, as a result of the relay server model being deployed in the joint Apple-Google model.

“We very much appreciate that Google and Apple are stepping up to making the operating system layer available — or putting what should be the OS actually there, which is the Bluetooth measurement and the handling of crypto and the background running of such tasks which have to keep running resiliently all the time — if you look at their protocols and if you look at whom they are provided by, the two dominant players in the mobile ecosystem, then I think that from a government perspective especially, or from lots of government perspectives, there are many open points to discuss,” said Boos today.

“From a PEPP-PT perspective there are a few points to discuss because we want choice and implementing choice in terms of model — decentralized or centralized on top of their protocol creates actually the worst of both worlds — so there are many points to discuss. But contrary to the behavior that many of us who work with tech companies are used to Google and Apple are very open in these discussions and there’s no point in getting up in arms yet because these discussions are ongoing and it looks like agreement can be reached with them.”

It wasn’t clear what specific changes PEPP-PT wants from Apple and Google — we asked for more detail during the webinar but didn’t get a response. But the group and its government backers may be hoping to dilute the tech giants’ stance to make it easier to create centralized graphs of Bluetooth contacts to feed national coronavirus responses.

As it stands, Apple and Google’s API is designed to block contact matching on a server — though there might still be ways for governments (and others) to partially work around the restrictions and centralize some data.

We reached out to Apple and Google with questions about the claimed discussions with PEPP-PT. At the time of writing, neither had responded.

As well as Italy, the German and French governments are among those that have indicated they’re backing PEPP-PT for national apps — which suggests powerful EU Member States could be squaring up for a fight with the tech giants, along the lines of Apple versus the FBI, if pressure to tweak the API fails.

Another key strand to this story is that PEPP-PT continues to face strident criticism from privacy and security experts in its own backyard — including after it removed a reference to a decentralized protocol for COVID-19 contacts tracing that’s being developed by another European coalition, comprised of privacy and security experts, called DP-3T.

Coindesk reported on the silent edit to PEPP-PT’s website yesterday.

Backers of DP-3T have also repeatedly queried why PEPP-PT hasn’t published code or protocols for review to-date — and even gone so far as to dub the effort a “trojan horse.”

ETH Zürich’s Dr. Kenneth Paterson, who is both a part of the PEPP-PT effort and a designer of DP-3T, couldn’t shed any light on the exact changes the coalition is hoping to extract from “Gapple” when we asked.

“They’ve still not said exactly how their system would work, so I can’t say what they would need [in terms of changes to Apple and Google’s system],” he told us in an email exchange.

Today Boos couched the removal of the reference to DP-3T on PEPP-PT’s website as a mistake — which he blamed on “bad communication.” He also claimed the coalition is still interested in including the former’s decentralized protocol within its bundle of standardized technologies. So the already sometimes fuzzy lines between the camps continue to be redrawn. (It’s also interesting to note that press emails to Boos are now being triaged by Hering Schuppener, a communications firm that sells publicity services, including crisis PR.)

“We’re really sorry for that,” Boos said of the DP-3T excision. “Actually we just wanted to put the various options on the same level that are out there. There are still all these options and we very much appreciate the work that colleagues and others are doing.

“You know there is a hot discussion in the crypto community about this and we actually encourage this discussion because it’s always good to improve on protocols. What we must not lose sight of is… that we’re not talking about crypto here, we’re talking about pandemic management and as long as an underlying transport layer can ensure privacy that’s good enough because governments can choose whatever they want.”

Boos also said PEPP-PT would finally be publishing some technical documents this afternoon — opting to release information some three weeks after its public unveiling and on a Friday evening (a seven-page ‘high level overview’ has since been put on their GitHub here [this link has since been deleted – Ed.] — but still a far cry from code for review) — while making a simultaneous plea for journalists to focus on the “bigger picture” of fighting the coronavirus rather than keep obsessing over technical details. 

During today’s webinar some of the scientists backing PEPP-PT talked about how they’re testing the efficacy of Bluetooth as a proxy for tracking infection risk.

“The algorithm that we’ve been working on looks at the cumulative amount of time that individuals spend in proximity with each other,” said Christophe Fraser, professor at the Nuffield Department of Medicine and Senior Group Leader in Pathogen Dynamics at the Big Data Institute, University of Oxford, offering a general primer on using Bluetooth proximity data for tracking viral transmission.

“The aim is to predict the probability of transmission from the phone proximity data. So the ideal system reduces the requested quarantine to those who are the most at risk of being infected and doesn’t give the notification — even though some proximity event was recorded — to those people who’re not at risk of being infected.”

“Obviously that’s going to be an imperfect process,” he went on. “But the key point is that in this innovative approach that we should be able to audit the extent to which that information and those notifications are correct — so we need to actually be seeing, of the people who have been sent the notification how many of them actually were infected. And of those people who were identified as contacts, how many weren’t.

“Auditing can be done in many different ways for each system but that step is crucial.”

Evaluating the effectiveness of the digital interventions will be vital, per Fraser — whose presentation could have been interpreted as making a case for public health authorities to have fuller access to contacts graphs. But it’s important to note that DP-3T’s decentralized protocol makes clear provision for app users to opt-in to voluntarily share data with epidemiologists and research groups to enable them to reconstruct the interaction graph among infected and at risk users (aka to get access to a proximity graph).

“It’s really important that if you’re going to do an intervention that is going to affect millions of people — in terms of these requests to [quarantine] — that that information be the best possible science or the best possible representation of the evidence at the point at which you give the notification,” added Fraser. “And therefore as we progress forwards that evidence — our understanding of the transmission of the virus — is going to improve. And in fact auditing of the app can allow that to improve, and therefore it seems essential that that information be fed back.”

None of the PEPP-PT-aligned apps that are currently being used for testing or reference are interfacing with national health authority systems, per Boos — though he cited a test in Italy that’s been plugged into a company’s health system to run tests.

“We have supplied the application builders with the backend, we have supplied them with sample code, we have supplied them with protocols, we have supplied them with the science of measurement, and so on and so forth. We have a working application that simply has no integration into a country’s health system — on Android and on iOS,” he noted.

On its website PEPP-PT lists a number of corporate “members” as backing the effort — including the likes of Vodafone — alongside several research institutions including Germany’s Fraunhofer Heinrich Hertz Institute for telecoms (HHI) which has been reported as leading the effort.

The HHI’s executive director, Thomas Wiegand, was also on today’s call. Notably, his name initially appeared on the authorship list for the DP-3T’s white paper. However, on April 10 he was removed from the README and authorship list, per its GitHub document history. No explanation for the change was given.

During today’s press conference Wiegand made an intervention that seems unlikely to endear him to the wider crypto and digital rights community — describing the debate around which cryptography system to use for COVID-19 contacts tracing as a ‘side show’ and expressing concern that what he called Europe’s “open public discussion” might “destroy our ability to get ourselves as Europeans out of this.”

“I just wanted to make everyone aware of the difficulty of this problem,” he also said. “Cryptography is only one of 12 building blocks in the system. So I really would like to have everybody go back and reconsider what problem we are in here. We have to win against this virus… or we have another lockdown or we have a lot of big problems. I would like to have everybody to consider that and to think about it because we have a chance if we get our act together and really win against the virus.”

The press conference had an even more inauspicious start after the Zoom call was disrupted by racist spam in the chat field. Right before that Boos had kicked off the call saying he had heard from “some more technically savvy people that we should not be using Zoom because it’s insecure — and for an initiative that wants security and privacy it’s the wrong tool.”

“Unfortunately we found out that many of our international colleagues only had this on their corporate PCs so over time either Zoom has to improve — or we need to get better installations out there. It’s certainly not our intention to leak the data on this Zoom,” he added.



Source link

108 COMMENTS

  1. Greetings! I know this is kind of off topic but I was wondering if you knew where I could find a captcha plugin for my comment form? I’m using the same blog platform as yours and I’m having trouble finding one? Thanks a lot!|

  2. I really love your blog.. Very nice colors & theme. Did you make this website yourself? Please reply back as I’m attempting to create my very own website and would like to find out where you got this from or exactly what the theme is called. Thanks!|

  3. hello!,I really like your writing so much! percentage we be in contact extra about your article on AOL? I need a specialist in this house to resolve my problem. Maybe that is you! Taking a look ahead to see you. |

  4. Excellent weblog right here! Additionally your web site a lot up fast! What web host are you using? Can I am getting your associate hyperlink in your host? I wish my site loaded up as fast as yours lol|

  5. First of all I would like to say fantastic blog! I had a quick question that I’d like to ask if you do not mind. I was curious to know how you center yourself and clear your mind prior to writing. I’ve had difficulty clearing my mind in getting my ideas out. I do take pleasure in writing but it just seems like the first 10 to 15 minutes are usually wasted simply just trying to figure out how to begin. Any ideas or tips? Kudos!|

  6. Everything said made a great deal of sense. But, what about this? what if you were to write a awesome post title? I mean, I don’t want to tell you how to run your blog, but suppose you added something that makes people desire more? I mean BLOG_TITLE is kinda boring. You might glance at Yahoo’s home page and see how they create post headlines to get people to open the links. You might add a video or a pic or two to grab people interested about what you’ve written. In my opinion, it would make your posts a little bit more interesting.|

  7. Unquestionably consider that that you stated. Your favourite justification seemed to be on the internet the simplest factor to remember of. I say to you, I definitely get irked whilst other people consider issues that they just don’t recognize about. You controlled to hit the nail upon the highest and also defined out the entire thing without having side effect , other folks can take a signal. Will probably be back to get more. Thanks|

  8. Wow, marvelous weblog format! How lengthy have you been running a blog for? you make blogging look easy. The whole glance of your web site is magnificent, let alone the content!

  9. I do agree with all the ideas you have presented in your post. They are very convincing and can definitely work. Nonetheless, the posts are too brief for starters. May you please lengthen them a little from subsequent time? Thanks for the post.|

  10. You have made some decent points there. I looked on the internet for more info about the issue and found most individuals will go along with your views on this web site.|

  11. I’ve been surfing online more than 2 hours today, yet I never found any interesting article like yours. It’s pretty worth enough for me. In my view, if all web owners and bloggers made good content as you did, the net will be a lot more useful than ever before.|

  12. That is very attention-grabbing, You are an excessively skilled blogger. I have joined your feed and sit up for searching for extra of your great post. Also, I have shared your web site in my social networks|

  13. I am sure this article has touched all the internet viewers, its really really pleasant piece of writing on building up new web site.

  14. Awesome site you have here but I was curious if you knew of any forums that cover the same topics talked about in this article? I’d really love to be a part of group where I can get advice from other knowledgeable individuals that share the same interest. If you have any recommendations, please let me know. Bless you!|

  15. Please let me know if you’re looking for a article writer for your blog. You have some really good posts and I think I would be a good asset. If you ever want to take some of the load off, I’d really like to write some content for your blog in exchange for a link back to mine. Please send me an email if interested. Thank you!|

  16. Unquestionably believe that which you stated. Your favourite reason appeared to be on the
    web the simplest thing to have in mind of. I say to you, I certainly get irked at the same time as other people consider issues
    that they plainly do not realize about. You managed to
    hit the nail upon the highest and also defined out the entire
    thing without having side effect , other folks could take a signal.
    Will likely be again to get more. Thank you

  17. I know this if off topic but I’m looking into starting my own blog and was wondering what all is required to get set up? I’m assuming having a blog like yours would cost a pretty penny? I’m not very web savvy so I’m not 100 sure. Any suggestions or advice would be greatly appreciated. Kudos|

  18. Hi there, every time i used to check webpage posts here early in the break of day, for the reason that i like to gain knowledge of more and more.|

  19. I love your blog.. very nice colors & theme. Did you create this website yourself or did you hire someone to do it for you? Plz answer back as I’m looking to create my own blog and would like to find out where u got this from. many thanks|

  20. Greetings, There’s no doubt that your site may be having web browser compatibility issues. When I look at your web site in Safari, it looks fine however when opening in IE, it’s got some overlapping issues. I just wanted to give you a quick heads up! Apart from that, wonderful site!|

  21. I do agree with all the concepts you’ve presented to your post. They are very convincing and will certainly work. Still, the posts are too quick for starters. May just you please extend them a bit from next time? Thanks for the post.|

  22. certainly like your website however you need to test the spelling on several of your posts. Several of them are rife with spelling problems and I find it very troublesome to inform the reality nevertheless I will certainly come again again.

  23. You really make it seem so easy with your presentation but I find this matter to be really something which I think I would never understand. It seems too complex and extremely broad for me. I’m looking forward for your next post, I’ll try to get the hang of it!|

  24. A person necessarily help to make seriously posts I’d state. This is the very first time I frequented your website page and thus far? I amazed with the research you made to create this actual submit amazing. Excellent activity!|

  25. This is really attention-grabbing, You are a very skilled blogger. I have joined your rss feed and stay up for looking for more of your fantastic post. Additionally, I have shared your website in my social networks|

  26. I was wondering if you ever considered changing the structure of your blog? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having one or two images. Maybe you could space it out better?|

  27. We stumbled over here from a different web page and thought I might as well check things out. I like what I see so now i am following you. Look forward to exploring your web page again.|

  28. I think this is one of the such a lot important information for
    me. And i’m happy reading your article. However should commentary on some common issues,
    The site style is perfect, the articles is in point of fact excellent :
    D. Excellent job, cheers

  29. Excellent blog you have here but I was curious if you knew of any community forums that cover the same topics talked about in this article? I’d really love to be a part of online community where I can get feedback from other experienced people that share the same interest. If you have any recommendations, please let me know. Kudos!|

  30. I think that is among the so much vital information for me. And i am happy studying your article. But should commentary on few common issues, The website taste is wonderful, the articles is in reality great : D. Good activity, cheers|

  31. You actually make it appear so easy together with your presentation however I to find this matter to be really something which I think I’d never understand. It kind of feels too complicated and extremely large for me. I am looking ahead for your next publish, I’ll attempt to get the hang of it!|

  32. Everyone loves what you guys are up too. This type of clever work and coverage! Keep up the amazing works guys I’ve incorporated you guys to my personal blogroll.|

  33. I am really loving the theme/design of your blog. Do you ever run into any web browser compatibility issues? A number of my blog visitors have complained about my blog not working correctly in Explorer but looks great in Safari. Do you have any tips to help fix this issue?|

  34. Make Your Camping outdoors Journey An Entertaining 1 Are you having the familiar encourage to hit the path for the calming camping getaway out in the wonderful outside? If you are planning to stay a long weekend, organizing is essential to enjoying your camping outdoors trip, be it right away or. The details using this article can make sure that your next camping outdoors journey is really as soothing and exciting when you wish. Permit everybody in the camping out celebration a say inside the campsite. Discuss their state to visit. There are several alternatives through the entire United states of america it is actually tough to select just one. You might even choose three or four feasible places and let a family group vote on to make it easier. Let all of the individuals your family members associates possess a palm in deciding on your campsite. Talk about the state you need to camp. There are a variety of selections in the us it is actually hard to choose just one. You are able to choose a household vote on making it much easier. Make sure your tent you have camping out has sufficient room for everybody you are taking alongside. This ensures there may be adequate getting to sleep layout and getting around space. Kids want to camp out, but you must pre-plan pursuits to allow them to do in the journey. They could not know how to fish or get a fish. Teach them these actions prior to making. Duct tape will be the get rid of-all for several difficulties on camping out journeys. It may repair a range ofstuff and holes, repairing your insect netting as well as other activities. There might be spiders or bears that could create a risk.Every single camping out getaway features its own potential risks. Should they be outdoor camping along.This comes in circumstance you can’t find them during the getaway, keep pictures of your respective young children for you. Constantly take an unexpected emergency photograph, particularly if an effective extended distance from your property. Duct adhesive tape is definitely an imperative item to incorporate in your camping out products. It can be as handy for improvements while you are camping out since it is around the house. You can use it to repair an air mattress ought to it get yourself a golf hole. It will also fix up a tarp, resting travelling bag, or the tent. Also you can safeguard the feet before long increases so that you don’t get blisters. It could also be utilized as being a bandage. Camping out may actually be loads of fun, as you can tell. Use these methods for guidance when preparing your impending outdoor camping trip. You are going to avoid adverse circumstances and like the benefits that camping outings offer, by discovering whatever you can.

  35. It is appropriate time to make some plans for the future and it is time to be happy. I have read this post and if I could I desire to suggest you few interesting things or advice. Perhaps you could write next articles referring to this article. I desire to read even more things about it!|

  36. Hi there, just became alert to your blog through Google, and found that it is really informative.

    I am gonna watch out for brussels. I’ll appreciate if you continue this in future.
    Numerous people will be benefited from your writing.
    Cheers!

  37. Hey would you mind stating which blog platform you’re using? I’m going to start my own blog in the near future but I’m having a difficult time choosing between BlogEngine/Wordpress/B2evolution and Drupal. The reason I ask is because your design and style seems different then most blogs and I’m looking for something unique. P.S My apologies for being off-topic but I had to ask!|

  38. Hello! I know this is kinda off topic but I was wondering which blog platform are you using for this website? I’m getting fed up of WordPress because I’ve had problems with hackers and I’m looking at options for another platform. I would be fantastic if you could point me in the direction of a good platform.|

  39. Greetings from Los angeles! I’m bored at work so I decided to browse your site on my iphone during lunch break. I enjoy the info you provide here and can’t wait to take a look when I get home. I’m amazed at how fast your blog loaded on my mobile .. I’m not even using WIFI, just 3G .. Anyhow, excellent site!|

  40. Hey there would you mind sharing which blog platform you’re using? I’m looking to start my own blog soon but I’m having a difficult time making a decision between BlogEngine/Wordpress/B2evolution and Drupal. The reason I ask is because your design and style seems different then most blogs and I’m looking for something completely unique. P.S Apologies for getting off-topic but I had to ask!|

  41. Hello I am so grateful I found your website, I really found you by error, while I was researching on Yahoo for something else, Nonetheless I am here now and would just like to say kudos for a tremendous post and a all round entertaining blog (I also love the theme/design), I don’t have time to read through it all at the moment but I have bookmarked it and also added in your RSS feeds, so when I have time I will be back to read more, Please do keep up the superb b.|

LEAVE A REPLY

Please enter your comment!
Please enter your name here