Listen to this Article Now
By Leo Kelion Technology desk editor
Apple and Google have tightened privacy measures in the contact-tracing scheme they are offering to health authorities and brought forward its launch.
The tech giants now intend to release a software building block to developers on Tuesday, allowing them to build compatible apps. A fortnight ago, the firms said it would take until mid-May.
Apple’s version will require an updated version of its mobile operating system.
Some countries, however, would prefer the firms to be less prescriptive.
France and Germany have confirmed they are pursuing designs of their own, and are pressing Apple to let them have greater access to the iPhone’s capabilities without having to adopt the initiative.
In a blog published earlier, NHSX, the digital wing of the NHS, confirmed it was “working with Apple and Google” on its UK contact tracing app, but stopped short of committing itself to the companies’ framework.
Contact-tracing apps are based on the principle that people’s smart phones can be used to log when two people are in close enough proximity for long enough that there’s a high risk of contagion if one of them has the coronavirus.
If one of the phone-owners is subsequently diagnosed as having caught the virus, others they might have infected can be sent alerts advising them to get tested or go into self-isolation.
By combining the use of such apps with other measures – including manual contact tracing by humans and frequent hand washing – the hope is that the spread of the disease can be slowed or suppressed.
Apple and Google’s system is based on the use of Bluetooth Low Energy (LE) beacons. Effectively, the two handsets wirelessly “shake hands” with each other, and in doing so exchange a string of randomly-generated numbers that can be used to log matches without revealing the users’ names, location or other identifying information.
Representatives from the team responsible said they had listened to feedback received from health authorities, governments and data protection watchdogs, and made changes to both increase security and to make it easier for apps to be built using the API (application programming interface) building block they are providing.
These changes include:
- giving information about different devices’ Bluetooth power levels, to help developers better estimate how far two handsets are from each other
- letting developers decide for themselves how close together phones should be and for how long to trigger a handshake
- preventing the phones from logging any meeting as having lasted longer than 30 minutes
- encrypting data about the transmission power of the phones, to prevent anyone retrospectively using the logs to reveal what models had been involved
- changing to a different encryption algorithm – AES – to reduce the toll on battery life
Apple will require users to install a new version of iOS 13 to use the API. That means any handset older than the iPhone 6S – which was released in September 2015 – will be incompatible.
Any Android device running version 6 of Google’s operating system, which launched in October 2015, or higher will work without needing an update.