In a recent breakthrough aimed at curbing the growth of the COVID-19 epidemic, a team led by MIT researchers and experts from many institutions is developing a system that augments “manual” contact tracing of Covid-19 affected individuals by public health officials, while preserving their privacy. The system relies on short-range Bluetooth signals emitted from people’s smartphones. These signals represent random strings of numbers, likened to “chirps” that other nearby smartphones can remember hearing.
Lets assume someone has been diagnosed as COVID-19 positive. Health officials begin contact tracing to contain infections, asking them to identify people with whom they have been in close contact. The obvious people that come to mind are their family and coworkers. But what about the woman ahead of them in line last week at the pharmacy, or the man bagging their groceries? Or any of the other strangers they may have come close to in the past 14 days?
This is where the newly developed system can prove to a be a game changer.
According to the research team, when using the system, if a person tests positive, they can upload the list of chirps their phone has put out in the past 14 days to a database. Other people can then scan the database to see if any of those chirps match the ones picked up by their phones. If there’s a match, a notification will inform that person that they may have been exposed to the virus, and will include information from public health authorities on next steps to take. Vitally, this entire process is done while maintaining the privacy of those who are COVID-19 positive and those wishing to check if they have been in contact with an infected person.
In simpler words, as according to Ron Rivest, MIT Institute Professor and Principal Investigator of the project, keeping track of what a person has broadcasted by self along with what others are broadcasting, will allow to tell if someone was in close proximity to an infected person. But for these broadcasts, the team is using cryptographic techniques to generate random, rotating numbers that are not just anonymous, but pseudonymous, constantly changing their ‘ID,’ and that can’t be traced back to an individual.
This approach to private, automated contact tracing will be available in a number of ways, including through the privacy-first effort launched at MIT in response to Covid-19 called SafePaths. This broad set of mobile apps is under development by a team led by Ramesh Raskar of the MIT Media Lab. The design of the new Bluetooth-based system has benefited from SafePaths’ early work in this area.
Bluetooth Exchanges
Smartphones already have the ability to advertise their presence to other devices via Bluetooth. Apple’s “Find My” feature, for example, uses chirps from a lost iPhone or MacBook to catch the attention of other Apple devices, helping the owner of the lost device to eventually find it. And according to Marc Zissman, the associate head of MIT Lincoln Laboratory’s Cyber Security and Information Science Division and Co-principal Investigator of the project, the same “Find My” feature inspired this system.
With their system, the team is essentially asking a phone to send out this kind of random signal all the time and to keep a log of these signals. At the same time, the phone detects chirps it has picked up from other phones, and only logs chirps that would be medically significant for contact tracing — those emitted from within an approximate 6-foot radius and picked up for a certain duration of time, say 10 minutes.
Phone owners would get involved by downloading an app that enables this system. After a positive diagnosis, a person would receive a QR code from a health official. By scanning the code through that app, that person can upload their log to the cloud. Anyone with the app could then initiate their phones to scan these logs. A notification, if there’s a match, could tell a user how long they were near an infected person and the approximate distance.
Privacy-Preserving Technology
The countries most successful at containing the spread of Covid-19 have been using smartphone-based approaches to conduct contact tracing, yet the researchers note these approaches have not always protected individual’s privacy. South Korea, for example, has implemented apps that notify officials if a diagnosed person has left their home, and can tap into people’s GPS data to pinpoint exactly where they’ve been.
For the newly developed system too, according to Daniel Weitzner, a Principal Research Scientist in the MIT Computer Science and Artificial Intelligence Laboratory (CSAIL) and co-Principal Investigator of this effort, the bluetooth system does not track not location, not uses GPS, or does not attach personal ID or phone number to any of the random numbers the phone will be emitting. What is required is to enable everyone to participate in a shared process of seeing if they might have been in contact, without revealing, or forcing anyone to reveal, anything.
Choice is key. Weitzner sees the system as a virtual knock on the door that preserves people’s right to not answer it. The hope, though, is that everyone who can opt in would do so to help contain the spread of Covid-19. According to Weitzner, there is a need of large percentage of the population to opt in for this system to really work.
Public Health Impact
Throughout the development process, the researchers have worked closely with a medical advisory team to ensure that this system would contribute effectively to contact tracing efforts. This team is led by Louise Ivers, who is an infectious disease expert, associate professor at Harvard Medical School, and executive director of the Massachusetts General Hospital Center for Global Health.
According to Ivers, for a country like US, where the affected people numbers are sky rocketing by each passing day, it needs to have a much more proactive approach that allows health officials to trace more widely contacts for confirmed cases. This automated and privacy-protecting approach could really transform the ability to get the epidemic under control here and could be adapted to have use in other global settings. What’s also great is that the technology can be flexible to how public health officials want to manage contacts with exposed cases in their specific region, which may change over time.
For example, the system could notify someone that they should self-isolate, or it could request that they check in through the app to connect with specialists regarding daily symptoms and well-being. In other circumstances, public health officials could request that this person get tested if they were noticing a cluster of cases.
The ability to conduct contact tracing quickly and at a large scale can be effective not only in flattening the curve of the outbreak, but also for enabling people to safely enter public life once a community is on the downward side of the curve.
Toward Implementation
MIT Lincoln Laboratory engineers have led the prototyping of the system. One of the hardest technical challenges has been achieving interoperability, that is, making it possible for a chirp from an iPhone to be picked up by an Android device and vice versa. A test at the laboratory late last week proved that they achieved this capability, and that chirps could be picked up by other phones of various makes and models.
A vital next step toward implementation is engaging with the smartphone manufacturers and software developers — Apple, Google, and Microsoft. According to Rivest, they have a critical role here. The aim of the prototype is to prove to these developers that this is feasible for them to implement. As those collaborations are forming, the team is also demonstrating its prototype system to state and federal government agencies.
Rivest emphasizes that collaboration has made this project possible. These collaborators include the Massachusetts General Hospital Center for Global Health, CSAIL, MIT Lincoln Laboratory, Boston University, Brown University, MIT Media Lab, The Weizmann Institute of Science, and SRI International. The team also aims to play a central, coordinating role with other efforts around the country and in Europe to develop similar, privacy-preserving contact-tracing systems.
