From e009acda6c9f94d3816a34f45aa92b608e2e95c5 Mon Sep 17 00:00:00 2001 From: Thomas Augsten Date: Tue, 16 Mar 2021 11:16:37 +0100 Subject: [PATCH] Update event-registration-summary.md --- event_registration.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/event_registration.md b/event_registration.md index 212d479..92a1393 100644 --- a/event_registration.md +++ b/event_registration.md @@ -1,4 +1,4 @@ -# Event Registration - Summary +# Event Registration DRAFT - Summary Presence Tracing - in CWA also referred to as _Event Registration_ - aims at notifying people of a potential SARS-CoV-2 exposure if they have been to the same venue at a similar time as a positively tested individual. It addresses the potential of airborne transmission in spaces with poor ventilation despite maintaining physical distance. As such, it complements BLE-based proximity tracing with the Exposure Notification Framework. @@ -10,7 +10,7 @@ When an attendee tests positive for SARS-CoV-2, they can upload their check-ins ![TAM Diagram for Event Registration](./images/evreg-tam-block.png) -## Threats +## Threats WiP Several security and privacy threats have been identified for the proposed solution. This includes common security threats such as distributed denial of service attacks or code injection, which also exist for other CWA components and are mitigated accordingly. It also includes threats specific to Presence Tracing, such as profiling venues and users or issuing false warnings for specific venues. These threats are described below along with the corresponding mitigation. @@ -52,7 +52,7 @@ To mitigate the risk, CWA only allows a certain number of check-ins per day. Thi However, we acknowledge that this does not prevent to execute this attack for a small number of venues. -## QR Code Structure +## QR Code Structure DRAFT The QR code of a venue contains all required attributes for Presence Tracing, so that no server communication is necessary when an attendee checks in to a venue @@ -119,7 +119,7 @@ HTTPS://E.CORONAWARN.APP/C1/BIPEY33... The base32 encoding allows to leverage the input mode _alphanumeric_ when generating the QR code and produces a QR code with a lower density compared to base64 encoding. -### Interoperability with Other Contact Tracing Apps +### Interoperability with Other Contact Tracing Apps DRAFT Other contact tracing apps that leverage QR code for Presence Tracing can integrate with CWA by creating QR codes according to the following pattern: @@ -147,4 +147,4 @@ HTTPS://PRESENCE-TRACING.APP/386D0384-8AAA-41B6-93C2-D3399894D0EE/CWA1/BIPEY33.. # base64 encoding https://check-in.pt.app/386d0384-8aaa-41b6-93c2-d3399894d0ee/CWA1/CiRmY2E... |-----------------|-----------------------| |--...| -``` \ No newline at end of file +```