Contact confirmation application Technicians verify safety etc. “No major problems” 4:21, June 21
On the 20th, an event was held on the 20th to verify whether the privacy of users was protected by information security technicians regarding the contact confirmation application that started to be used on the 19th with measures against the new coronavirus.
This was opened online by the Japan Hacker Association, which is made up of information security engineers, and about 290 people participated.
The contact confirmation application, which started to be used on the 19th, can be notified when there is a suspicion of rich contact with a person infected with the new coronavirus, and in order to protect privacy, a mechanism that does not collect personal information at all It has become.
At the event, each participant independently verified the movement of the application and what kind of communication they were making, and reported the content. As a result, no major problems were found in the privacy protection system and safety.
On the other hand, like general applications, there was a mechanism to send technical data such as identification number to the server when the application terminated abnormally, but according to the privacy policy published by the Ministry of Health, Labor and Welfare. , It turns out that there is no mention of these communications.
Takayuki Sugiura, Chairman of the Japan Hacker Association, said, "There was no problem overall, but it is desirable to correct any omissions in the privacy policy. By improving the problems found, reliability will increase, It could lead to an increase in users."