Explore a 21-minute conference talk from USENIX Enigma 2021 that delves into the design of verifiable health solutions for global pandemics. Gain insights from Mark Funk of Obscure Group as he shares his team's early work on creating an abstract solution for verifiable attestation, lab test results, and vaccination history during the COVID-19 outbreak. Learn about the complex considerations in addressing public safety and privacy concerns, including the user experience, general architecture options, and key protocol features. Examine the challenges of balancing centralized and hybrid architectures, understanding various actors in the system, and implementing policies for different capabilities. Discover how the proposed solution handles identity verification, health verification, and abuse prevention while enforcing isolation measures. Reflect on the lessons learned and how they can be applied to better prepare for future health crises and evaluate the costs of introducing new technologies.
Overview
Syllabus
Intro
Mark Funk Security. Privacy Product, and Systems Engineer
Global Pandemic COVID-19 Timeline
The Project Goals and Objectives
The User Experience Making Compliance Easy
Safety Is Difficult
General Architecture Options For Sharing Health Information
Centralized Design
Hybrid Architecture Where Is The Right Balance?
Actors In This System Summarizing The Moving Parts
What Do Policies Look Like? Contrasting Different Capabilities
Key Properties Features of the Protocol
Core Protocol Used For All Communications
Core Protocol Data From The Prover's Perspective
Identity Verification
Health Verification
Creating Ephemeral Pass Credential Indirection
Handling Abuse When Using Ephemeral Passes
Enforcing Isolation And Elevating Trust Elsewhere
Example Isolation Timeline Making It Clear When You Need To Stay Home
Taught by
USENIX Enigma Conference
