Covid Tracer

Real World Problem

Due to the prevailing pandemic situation people have a responsibility of providing accurate details of themselves at entrances of various commercial places like shopping malls, banks etc. and get their temperatures checked and accepted before entering. This situation is currently handled manually by people writing details on a book at entrances of various places.

Some major issues with this system includes:

• Inefficient thus time consuming
• Risk of getting infected by everyone touching same stationary is high
• Details get blot by touching with wet hands after washing or sanitizing
• Personal details of people are publicly made available
• High probability for the guard at the entrance checking temperatures to get in contact with infects
• People providing inaccurate data, neglecting providing details and getting the temperature checked
• Inability to detect people under quarantine
• Inability to keep track of infected percentages of the locations visited

Adhering to workplace safety and health practices and ensuring access to decent work and the protection of labour rights in all industries will be crucial in addressing the human dimension of the crisis.

Description

Our system can be described in four segments.

A software for data entering, data representing along with a computerized database system will be provided to the Government Authorities. They maintain detailed Covid related information like infects, pcr test reports,people under quarantine etc. in their server system. Our database system will be updated on certain intervals with the Government Server through a REST API.

Our server system will be deployed in the cloud. We will keep information about people's NIC numbers, addresses, contact numbers, visited locations, temperature readings obtained at various entrances etc. Various calculations on data for example infect percentages will be done on a cloud virtual environment

Commercial Merchants including shopping malls, banks etc. will be provided with an embedded system device based on a micro-controller. People can scan their IDs before entering and the system will check with the servers if the person's under quarantine. The temperature will be measured by contact-less sensors and checked if satisfactory. Whether the person is allowed to enter or not will be notified using LED displays and buzzers. ID number along with the temperature and location will be stored in our servers for a 2 week period. Therefore merchants don't have the burden of handling customer details. At the same time people don't have to provide their details publicly. Commercial merchants have the choice of implementing our door system which will be opened automatically based on the customer's conditions

The local community will be provided with a website as well as a mobile app. They can visit our website/app to view general Covid related information in the country eg: daily/cumulative cases and deaths, infect persentages of different areas. A seperate user login is provided to view personal data eg: infect percentage reported later of visited locations, temperature fluctuations, general health alerts released by Government eg: vaccinating dates in different areas as well as user specific health alerts

what are the sensitive data that needs to be secured?

Any system that handles PII(Personally Identifiable Information) or SPII(Sensitive Personally Identifiable Information) or any Health Care data, are legally obligated to protect these data. If these information are compromised it can lead to devastating consequences like identity theft incidents, high risk of damage to a individual, loss of trust on the system and many more. There are many international guidlines such a system needs to adhere to. For example GDPR(General Data Protection Regulation), HIPAA(Health Insurance Portability and Accountability Act)

Our system keeps personal details about people like full name, NIC, address, contact details, locations they have visited, health details like temperatures and oxygen levels. These data have high criticality. When such system is deployed, many attackers try to play with the data since the data can be of interest to many. For example if a person can access to someone else's mobile app, he can checkin to places pretending to be someone else. If our database is compromised it can lead to a data breach which will expose all the PII details of the community. This can even result in Ransomware attacks.