Exposure Notification Workflow Using Anonymous Visit History
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to efficiently notify individuals of the risk of infection with infectious diseases based on movement history data while protecting user privacy and avoiding identification of infected individuals.
Innovation Solution
An information processing system comprising a first and multiple second information processing apparatuses that identify places visited by infected individuals and notify users who may have been in proximity, using anonymous movement history data without revealing personal information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If movement history information is used to identify infected individuals and notify contacts, then infection risk notification accuracy is improved, but user privacy protection deteriorates
Solution Approach 1:
The system extracts only the necessary elements from movement history data - specifically place identification information and visit date/time - while deliberately excluding personal identifying information. This extraction approach enables infection risk notification without compromising user privacy, as the notified information contains no personal identifiers that would reveal infected individual identities.
Solution Approach 2:
The notification system acts as an intermediary that processes movement history information through anonymization. It receives detailed movement data, strips away personal identifying elements, and transmits only place and time information to relevant parties. This intermediary processing layer protects user privacy while maintaining the utility of the data for infection risk notification purposes.
2Measurement precision
If detailed movement history data is collected and processed, then infection risk identification accuracy is improved, but system complexity increases
Solution Approach 1:
The system extracts only the essential components needed for infection risk notification - place identification and visit timing information - from the comprehensive movement history data. By extracting only these specific elements and discarding redundant personal identifying information, the system reduces processing complexity while maintaining sufficient accuracy for contact notification purposes.
3Reliability
If personal information is included in notifications, then individual accountability is improved, but privacy protection deteriorates
Solution Approach 1:
The notification system extracts and transmits only place identification information and visit date/time data, deliberately excluding all personal identifying information from notifications. This extraction approach maintains the reliability of contact tracing by providing accurate location and timing data while simultaneously protecting privacy by removing personal identifiers that would compromise confidentiality.
Data Source
AI summary
An information processing system includes a first information processing apparatus, and a plurality of second information processing apparatuses. The first information processing apparatus acquires movement history information on an infected person with a predetermined infectious disease, identifies, based on the movement history information, a first place that the infected person visited and a first visit date and time, and notifies the second information processing apparatus associated with the first place of information about the first place and the first visit date and time. Each second information processing apparatus identifies, based on visit history information including a visit date and time of the predetermined place by users who are associated with the predetermined place, a first user who visited the first place on the first visit date and time, and notify the first user of possibility of being infected with the predetermined infectious disease.