Skip to content
This repository has been archived by the owner on Nov 16, 2020. It is now read-only.

Criticism whlie saving timestemp #9

Open
kreativmonkey opened this issue Apr 19, 2020 · 3 comments
Open

Criticism whlie saving timestemp #9

kreativmonkey opened this issue Apr 19, 2020 · 3 comments
Labels
discussion Topics of interest to the project privacy Personal data protection security

Comments

@kreativmonkey
Copy link
Member

In the comments of this article link are critics on saving the timestamp with the token. We notice this critic and would like to discuss if we can improve that issue.

@kreativmonkey kreativmonkey changed the title Critic whlie saving timestemp Criticism whlie saving timestemp Apr 19, 2020
@kreativmonkey
Copy link
Member Author

The idea behind storing the timestamp is that we need an indicator when the TCN (temporary contact number) was sent and when a TCN was recorded. There is no indicator for this in the TCN itself, so we need to store this information locally on the device. This information never leaves the phone and is never reported to anyone else like the server.

In my opinion, an improvement is not to store the entire timestamp. We can store the time like a day or a part of a day, so you don't know in which second you give it up.

@haveyaseen haveyaseen added the discussion Topics of interest to the project label Apr 19, 2020
@Dionysusnu
Copy link
Contributor

Dionysusnu commented Apr 20, 2020

The sent-out TCNs get changed every [interval], correct? If so, you don't need to store the recorded-TCNs timestamp, the infected device just needs to send only those sent out at times at which it was able to infect others. You'd still need to store the sent-out TCNs timestamps, but I don't think you can really avoid it. After all, you need to store somewhere, when the contact happened.
If not, there's still very little point storing it to the exact second, the minimum necessary would be [interval].
[interval] = how long a TCN lasts before the app starts sending out a new one.

@haveyaseen haveyaseen added privacy Personal data protection security labels Apr 22, 2020
@haveyaseen
Copy link
Member

It might not be necessary to store the contact times more accurately than to the day. In the end we want to be able to figure out the risk for infection. So if this risk is 0, that is if the user should no longer be able to infect others, those TCNs should get deleted. For both use cases we only need to know roughly when the contact happened.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
discussion Topics of interest to the project privacy Personal data protection security
Projects
None yet
Development

No branches or pull requests

3 participants