Privacy-Preserving Vaccine Distribution

Qamil Mirza
6 min readJan 29, 2021

Decentralizing Vaccination with Vaccination Cards and QR codes

We’re entering the vaccination phase and it’s going to be key to protect user data while they go through their vaccination journey

TL;DR

  • As we enter the vaccination phase, new problems regarding distribution arise.
  • People are becoming more aware when it comes to data privacy and the inability to protect that during the vaccination process will be a huge turnoff for some.
  • PathCheck developed a card protocol to coordinate vaccination for 1st & 2nd dose, verify vaccination status and stores encrypted vaccination data to keep your data private during your vaccination journey
  • No data will be uploaded unless you want it to but even then, that data will be anonymised.

New Hope, New Challenges

In 2020, most of the world’s efforts in containing the virus were done through methods like self-quarantine, social distancing and contact tracing. We didn’t have a vaccine last year but now that we have multiple vaccines, we are facing a huge logistical problem.

In my previous article on the MIT tough tech summit, I talked about how Vaxess Technologies would solve the cold-chain problem by making the vaccines shelf-stable using silk biomaterials.

This time, we’ll look at the on the ground efforts required to ensure the smooth distribution process. Protocols would have to be created to address several issues in the process such as:

  • Vaccination eligibility — Who gets it first?
  • 2nd dose reminders — How do we remind them to take their 2nd dose?
  • Post-vaccination safety monitoring — How do we monitor adverse events?

Current Platforms

Currently, there are a couple of systems that have been deployed by the Center for Disease Control (CDC) to address these issues. For example, the Vaccine Administration Management System (VAMS).

VAMS enables users to schedule appointments, receive records of their visit and receive reminders for the second dose. On top of that, they also have a system called the Vaccine Adverse Events Reporting System (VAERS).

As the name suggests, VAERS is a platform for reporting adverse events post-vaccination. As important it is to get the vaccine out, it’s also important to monitor it’s efficacy and side effects in the long term.

Data Privacy

As of recently, people have become more aware and more worried about how their data is being used online. According to this survey, 78% of people take their data seriously.

This was also made pretty clear given the response to COVID-19 contact tracing in some countries like the USA where some contact tracing apps had less than 10% downloads (of the population)

This is even more emphasized when it comes to medical data like vaccinations. This brings us to the current issue we’re facing. Current systems require a lot of personal information and this data is often centralized.

We don’t want another repeat of the general public’s response towards contact tracing when it comes to vaccine distribution. However, PathCheck is releasing a card-based solution augmented with QR codes to solve this problem.

PathCheck Foundation is all about privacy when it comes to containing COVID-19 and revitalizing the economy

About PathCheck Foundation

PathCheck Foundation is a generously funded 501(c)(3) non-profit spin-off from MIT, that is developing decentralized pandemic response solutions using an open-source, open standard interoperable model.

PathCheck is committed to sustained innovation in the middle of rapidly changing protocols, APIs, and epidemiological research in the pandemic response.

Previously, PathCheck has delivered Google/Apple Exposure Notification based full-featured apps in 5 US states/territories and multiple nations. The PathCheck Foundation has now developed a new privacy-preserving approach to vaccine rollout and distribution, utilizing a vaccination app and physical cards.

Follow here for updates: https://pathcheck.org/en/blog/.”

Vaccination Cards

Now that we’ve moved on to the vaccination phase, PathCheck is also planning to release a vaccination app and physical cards to help coordinate the vaccine distribution.

This is all done in a privacy-preserving manner using encryption and QR codes. The card has multiple purposes such as:

  • Coordination of phased vaccine distribution
  • Vaccine administration & record-keeping
  • Immunization verification
  • Follow-up symptom reporting

Let’s take a look at what the journey would look like if you were to get vaccinated with PathCheck’s vaccine card!

Your Vaccination Journey

Here’s the flow of the card system summed up in a one-pager

It’s finally your turn to get the COVID-19 Vaccine! You would receive the card from either the CDC, your employer or local government authority. On this card, you’ll see that there’s a QR code under the section ‘Coupon’.

That ‘Coupon’ QR code contains a pseudo-random identifier and will basically store your information. No personally identifiable information is stored (i.e name, phone number) within this QR code.

When you arrive at the clinic for vaccination, you’ll use the ‘Coupon’ QR code to check-in. Once you’ve received the 1st dose, the clinic will create a digitally-signed record of immunization and print it as a QR code.

This QR code is known as the ‘Badge’ and contains info regarding vaccination lot, time, date, and type of vaccine taken. Also, a unique encryption key is created to encrypt the badge information.

This encryption key is placed in the Passkey QR sticker. This means that after your 1st dose, you’ll have 2 additional QR stickers to add to your card. To access the Badge QR sticker, you’ll need to first scan the Passkey QR sticker to unlock the information.

The date of the second dose will be written on the card itself. Fast forward a couple of weeks and you’re going to get your second dose. To confirm your identity and the vaccine you took the first time, the clinic will use the 2 new stickers.

They’d scan the Passkey QR sticker followed by the Badge QR sticker to access this info. Once you’ve received your 2nd dose, they’ll print out the fourth and final sticker called the Status QR sticker.

Hooray!! You are officially vaccinated and with the Status QR sticker, you can prove it. The status sticker only contains info on whether or not you’re vaccinated. This is going to be useful if you ever plan to travel and they require proof of vaccination.

That’s it! If you want to anonymously upload symptom data post-vaccination, you can do so through their Vaccine Diary app which helps coordinate your vaccination journey.

This would upload it to existing systems like VAERS but all health and symptom information would be tied to your pseudorandom ID. As you can see, every step of the way, your personal information is secure and anonymised.

Potential Impact

We know that data privacy is something that’s starting to grow bigger and bigger every day with more people realizing the importance and relevance of keeping their personal data safe.

At the same time, we don’t want it to reach a point where people no longer trust healthcare systems as they do require a lot of personal information. By offering users the choice to receive vaccination while maintaining data privacy, they’d be more willing to actually get vaccinated.

As of 29th Jan 2021, 2,202,990 people has been killed by COVID-19. Giving them the choice of privacy, will hopefully streamline the distribution process and get more people vaccinated so that the world can finally beat COVID-19.

Hello From The Author!

Hey hey! Thank you for reading my article! I hope it gave you a clearer vision of what the vaccination process will look like and how your data would always be secure and uploading will always be your choice.

What do you think of PathCheck’s card system? Could you see yourself using it? Let me know in the comments hehe 😆!

Talk to you later,

Camel 🐪

Contact

Here’s my contact info if you want to reach out or even just say hi! (I don’t bite AHAHA) :

✉️ : qamilmirza@gmail.com

🔗 : Qamil Mirza

Oh yeah, I also have a newsletter where I send you monthly updates on cool projects I’m working on and different philosophies/ideas I choose to try out! If you want to be a part of that journey, join me here!:

References

[1]: Bae, J., Sukumaran, R., Shankar, S., Srivastava, S., Iyer, R., & Mahindra, A. et al. (2021). MIT SafePaths Card (MiSaCa): Augmenting Paper Based Vaccination Cards with Printed Codes. Retrieved 30 January 2021, from https://arxiv.org/abs/2101.07931

[2]: Bae, J., Blumenthal, S., Dhaliwal, J., Bergin, S., Sarma, S., & Raskar, R. (2021). Retrieved 30 January 2021, from https://pandemic.mit.edu/assets/files/PositionPaper.pdf

--

--