From 97840b86bd81549389f78d203829204bb6007d3d Mon Sep 17 00:00:00 2001 From: Thomas Klingbeil Date: Wed, 20 May 2020 09:16:31 +0200 Subject: [PATCH] clarify that upload only happens with user consent fixes #105 --- solution_architecture.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/solution_architecture.md b/solution_architecture.md index 0055082..6c551e5 100644 --- a/solution_architecture.md +++ b/solution_architecture.md @@ -41,7 +41,9 @@ Once the keys and the exposure detection configuration have been downloaded, the It is important to notice at this point, that the people that have been exposed to a positively tested person are **not informed by a central instance**, but the risk of an exposure is calculated locally on their phones. The information about the exposure remains on the user’s phone and is not shared. -The app pursues two objectives: First, supporting individuals in finding out whether they have been exposed to a person that has later been tested positively, and second receiving results of a SARS-CoV-2 test on their phone through an online system. This helps to reduce the period until necessary precautions (e.g. contact reduction and testing) can be taken. In order to prevent misuse, users need to verify that they have been tested positively before being able to upload their keys. Through this integrated approach, the verification needed for the upload of the diagnosis keys does not require any action from the users. They only have to confirm to the app and the Exposure Notification Framework that they are willing to share their diagnosis keys. Manual verification is also possible, if the lab that performed the testing does not support the direct electronic transmission of test results to the users' phone or if users have decided against the electronic transmission of their test results. +The app pursues two objectives: First, supporting individuals in finding out whether they have been exposed to a person that has later been tested positively, and second receiving results of a SARS-CoV-2 test on their phone through an online system. This helps to reduce the period until necessary precautions (e.g. contact reduction and testing) can be taken. +In order to prevent misuse, users need to provide proof that they have been tested positive before being able to upload their keys. Through this integrated approach, the verification needed for the upload of the diagnosis keys does not require any further action from the users. +They only have to confirm to the app and the Exposure Notification Framework that they are willing to share their diagnosis keys. Manual verification is also possible, if the lab that performed the testing does not support the direct electronic transmission of test results to the users' phone or if users have decided against the electronic transmission of their test results. ### Retrieval of lab results and verification process