Behind the scenes of a contact tracing study

Transcriber: Amanda Chu
Reviewer: Peter van de Ven

Sydney-Pacific,
it’s a very active community,

and the vast majority of events

center around congregating in groups
and eating shared food.

In March,

the undergraduate dorms de-densified

and then the graduate dorms
relatively soon after.

In Sydney-Pacific,

our new mode of living
required that we not allowed to gather,

and our student life sort of halted.

The spark that became this study

actually originated
from the grad students in the dorm.

They said, “Isn’t there
some type of technology or means

to understand usage of our shared spaces
and risk associated with it?”

I thought it’s a good question,
so I sent a note to two different groups,

one at the Computer Science
and Artificial Intelligence Laboratory

and another in the Media Lab.

I just asked, “Is there something
that we can use that is useful,

actually, like in a dorm?”

And both responded back
immediately and said,

“Not with what we have right now,
but here’s an idea.

Take Bluetooth beacon sources

and install them
in each of the common spaces,

and then we could develop an app

that would receive
that signal on the phone.

From that, you have the potential
to back out distance and proximity

and therefore use of those common spaces.

I just asked a few questions
and had a lot of volunteers overnight.

We had this amazing team

of faculty, grad students,
and professionals at Lincoln Lab.

[Anthony Lapadula -
Researcher, MIT Lincoln Laboratory]

Anthony Lapadula: So I think everybody
had the same idea at the same time.

Everybody carries a smartphone -

“Oh, what can we use from the smartphone
to measure a distance?”

Bluetooth was kind of
an obvious first guess.

And then the question is,

Can you measure how long
you’ve been close to someone,

and how close have you been
to that person?

I don’t think anyone knew at the beginning
how hard it was going to be.

Bluetooth was not designed for this.

If you just stand close
to a Bluetooth beacon with your phone

and watch the signal strength,

it tends to bounce around quite a bit.

Their reflections are across the wall;
there’s multi-source;

there’s all kinds of problems.

One of the biggest things
that degrades signal strength

is the human body.

What really excites me about this project

is the possibility of collecting
lots of Bluetooth data

to help us build a good mapping
between signal strength and proximity.

But we already had a calibration protocol

for people to collect data
in a structured way;

however, it was probably a couple hours
to actually run the entire protocol.

There was no way that
we would get people to volunteer,

so we came up with a very streamlined
calibration protocol.

You should be able to run
through one of these in about 60 seconds.

The joke I always make is,

“You’re in the kitchen.

You just put your burrito
in the microwave.

You have a couple of minutes.
Go ahead and do a couple of calibrations.”

Abhishek Singh: So I’ve been working
mostly around the app development.

It really gets tricky
running these Bluetooth apps

because the Google
and iOS operating systems

are really stringent about Bluetooth code
running in the background,

so it requires some fiddling around
and some rigorous testing.

So with iOS,

whenever the app
goes to a background state,

the iOS operating system
makes it in a sleep mode.

The app is - although running
in background -

it’s not really doing anything,

and it’s not really trivial
to wake up this app

and make sure that it keeps recording
the Bluetooth data and keep sending it.

In Android, we can do this
for every minute,

but there is some trade-off
with battery usage.

It looks like 15 minute
is like sort of a sweet spot,

where the app can wake up
and listen to the chirps

and then again go to sleep.

Daniel Ribeirinha-Braga:

The tricky part is those sensors.

You could have an Android phone

that is five or six years old;

however, your phone does not have
a gyroscope or a barometer,

so we have to be able
to create a data model

so that even if you don’t have
that information,

our backend server can still ingest that

and do something
with the remaining information.

So being able to test
those cases is critical.

We’d just run a bunch
of emulators on our computers,

but that’s completely different

because a barometer and a gyroscope
don’t exist in a virtual machine.

In a computer, you need a physical device.

We all did a bunch of testing on the app.

Some people have old iOS phones,

some people have
different Android phones.

That’s how we go through it.

Everyone tested on their phone.

We reported a bunch of bugs.

But there was a solid
two- or three-week period

where we were constantly
getting a list of tasks

and it’d be like,
“I saw this issue and that issue,”

but little by little,

we were able to really make some progress
to solidify the application.

Christopher Fourie:
So phones have complications.

Our tile-based solution is far simpler.

You have constant transmission power

because you no longer have to worry
about different device platforms.

It doesn’t require user inputs,

because you can just attach it
to your keys and forget about it.

So the entire solution is a lot simpler
and as a result, a lot more robust.

The device will constantly emit chirps.

We’ll record those chirps
using an external architecture,

and you can then figure out

which people were
in close proximity to each other.

So the tile solution allows us

to directly compare
the additional consequences

of using a phone-based environment

as opposed to something
that’s a little bit different.

Ilaria Liccardi: As a privacy researcher,

sometimes I try to think
of the worst case scenarios.

Sometimes I cannot even predict
what that will be,

because there are so many things
that could go wrong.

Especially some of the contact traces app
have leaked their entire email addresses.

So the fact that we’re using an ID
that only a few people have access to

and the fact that we are not
using location,

that was something
that we had discussed at length

because removing this kind of information
makes it more difficult,

but it does make
people’s identity more secure,

and we actually found
a good balance as a result.

We could have gone even further.

But with the balance that we strike,
I think it was good enough.

Sarah Chung: This whole process
is for the students, right?

I mean, there are research goals,

but part of it is
to benefit MIT campus in general,

and then much of it is by students

because they’re the boots on the ground.

They’re not only the boots on the ground
to set up all the infrastructure,

but they’re also the ones

who have to volunteer their own data
and download this app.

Without these student volunteers
advocating in the dorm,

this wouldn’t happen.

Without installers, this wouldn’t happen.

Without students registering,
this wouldn’t happen.

And then even after they register,

without them calibrating like,
also, it will not happen.

However, volunteers really
need to be invested in too.

They have to feel like
they’re getting something out of it.

And a lot of my thinking

has gone into how do we make this
more efficient and less work for them

so that they can enjoy
benefits with less cost

and they do what we hope
that they will do.

We shall see, right?

Because we’re just at the cusp
of rolling out Eastgate and Ashdown,

and we shall see.

Geeticka Chauhan:
As I talk with my officers

about different policies
we want to implement

or different events we want to run,

having the knowledge

that the contact tracing study
is going on in parallel

is very helpful,

and the officers that I’m involved with

are quite excited.

A lot of the questions
that other dorm presidents had

were primarily privacy concerns

and how the information
of the student would be kept

and how this information
would be used by MIT Medical.

Another thing that the dorm presidents
were really excited about -

they were thinking,

“Yeah, this is a really good thing
to start in the dorms,

but they were also asking Julie

if she’d be willing
to deploy this in the labs.

Przemyslaw Lasota:

The main objective
of the scientific protocol

was to evaluate

how digital contact tracing
would compare to manual contact tracing,

and we had three
secondary objectives in this study.

The first one was
understanding the trade-offs

between more privacy preserving

and less privacy preserving
digital contract tracing methods;

also, contributing calibration data

to help other researchers
understand the relationship

between Bluetooth
signal strength and distance;

and finally, trying to understand

user acceptance of different
digital contact tracing methods.

JS: I still am amazed where at the point,

we are just about ready
to launch the study at full scale

because the team that came together

was a set of people who had
literally never worked together,

and now we’re co-developing
software, hardware virtually.

And it’s been a dream team.

The complexity and scale
was surprising to me,

but you wouldn’t know it
based on how this has come together

in the course of six weeks
to two months.

We’re currently rolling out
to three of the graduate dorms,

but then three of the undergrad dorms,

as sort of a pilot or a test

of what we might be able
to do more broadly

when undergrads return
at a higher level in September.

The hope is that we can help
keep our community safer

through the fall reopening

and also provide valuable knowledge

on how digital
contact tracing technologies

can be used more broadly beyond MIT.

抄写员:Amanda Chu
审阅人:Peter van de Ven

悉尼太平洋,
这是一个非常活跃的社区

,绝大多数活动都

围绕成群聚集
和吃共享食物展开。

3 月份

,本科生宿舍开始疏散

,研究生宿舍也
相对较快。

在悉尼太平洋,

我们的新生活方式
要求我们不允许聚集

,我们的学生生活有点停止了。

成为这项研究的火花,

其实
源于宿舍里的研究生。

他们说:“难道没有
某种技术或手段

来了解我们共享空间的使用情况
和与之相关的风险吗?”

我认为这是一个很好的问题,
所以我给两个不同的小组发了一张便条,

一个在计算机科学
和人工智能实验室

,另一个在媒体实验室。

我只是问,“有
什么我们可以使用的有用的东西,

实际上,就像在宿舍里一样?”

两人
立即回复说:

“不是我们现在拥有的,
但这是一个想法。

获取蓝牙信标源

并将它们安装
在每个公共空间中

,然后我们可以开发一个应用

程序来接收
该信号 电话。

从那以后,你就有
可能远离距离和接近

,因此使用这些公共空间。

我刚问了几个问题
,一夜之间就有了很多志愿者。

我们有这个

由教师、研究生
和专业人士组成的了不起的团队 在林肯实验室。

[Anthony Lapadula -
麻省理工学院林肯实验室研究员]

Anthony Lapadula:所以我认为每个人
同时都有相同的想法。

每个人都带着智能手机——

“哦,我们可以从智能手机中使用什么
来测量距离? ”

蓝牙是
一个明显的第一个猜测

。然后问题是,

你能测量
你与某人亲近的时间,

以及你
与那个人的亲近程度吗?

我认为一开始没有人
知道 很难

。Bluetoot h 不是为此而设计的。

如果您只是
用手机站在蓝牙信标附近

并观察信号强度,

它往往会反弹很多。

他们的倒影在墙上;
有多种来源;

有各种各样的问题。

降低信号强度的最大因素之一

是人体。

这个项目真正让我兴奋的

是收集大量蓝牙数据的可能性,

以帮助我们
在信号强度和接近度之间建立良好的映射。

但是我们已经有了一个校准协议,

供人们
以结构化的方式收集数据;

但是,
实际运行整个协议可能需要几个小时。

我们没有
办法让人们自愿参加,

所以我们想出了一个非常简化的
校准协议。

您应该能够
在大约 60 秒内完成其中一项。

我经常开的玩笑是:

“你在厨房里。

你只要把墨西哥卷饼
放在微波炉里

。你有几分钟的时间。
来做几次校准。”

Abhishek Singh:所以我一直
主要围绕应用程序开发工作。

运行这些蓝牙应用程序真的很棘手,

因为谷歌
和 iOS 操作系统

对在后台运行的蓝牙代码非常严格

因此需要一些摆弄
和一些严格的测试。

因此,对于 iOS,

每当应用程序
进入后台状态时

,iOS 操作系统
都会使其进入睡眠模式。

该应用程序 - 尽管
在后台运行 -

它并没有真正做任何事情,

唤醒这个应用程序

并确保它继续
记录蓝牙数据并继续发送它并不是一件容易的事。

在 Android 中,我们可以
每分钟都这样做,

但在
电池使用方面存在一些权衡。

看起来 15
分钟就像一个甜蜜点

,应用程序可以在此醒来
并聆听唧唧声

,然后再次进入睡眠状态。

Daniel Ribeirinha-Braga

:棘手的部分是那些传感器。

你可能有一部五六岁的安卓手机

但是,您的手机
没有陀螺仪或气压计,

因此我们必须
能够创建一个数据模型,

以便即使您没有
这些信息,

我们的后端服务器仍然可以获取这些信息


使用剩余的信息做一些事情 .

因此,能够测试
这些案例至关重要。

我们只是
在我们的计算机上运行一堆模拟器,

但这完全不同,

因为虚拟机中不存在气压计和陀螺仪

在计算机中,您需要一个物理设备。

我们都对应用程序进行了一系列测试。

有些人有旧的 iOS 手机,

有些人有
不同的 Android 手机。

我们就是这样度过的。

每个人都在手机上进行了测试。

我们报告了一堆错误。

但是有一个稳定的
两到三周的时间

,我们不断地
得到一份任务清单

,就像
“我看到了这个问题和那个问题”,

但一点一点,

我们真的能够完成一些任务
巩固应用的进展。

Christopher Fourie:
所以手机有并发症。

我们基于图块的解决方案要简单得多。

您拥有恒定的传输功率,

因为您不再需要
担心不同的设备平台。

它不需要用户输入,

因为您只需将其附加
到您的钥匙上就可以忘记它。

所以整个解决方案要简单得多
,因此也更加健壮。

该设备将不断发出啁啾声。

我们将使用外部架构记录这些啁啾声

然后您可以找出

哪些人
彼此靠近。

因此,磁贴解决方案允许

我们直接比较

使用基于电话的环境的额外后果,

而不是稍微不同的东西。

Ilaria Liccardi:作为一名隐私研究员,

有时我会尝试
考虑最坏的情况。

有时我什至无法预测
那会是什么,

因为有很多
事情可能会出错。

特别是一些联系追踪应用程序
已经泄露了他们的整个电子邮件地址。

因此,我们
使用只有少数人可以访问的 ID

以及我们没有
使用位置的

事实,这
是我们详细讨论过的事情,

因为删除此类信息
会使其变得更加困难,

但它 确实使
人们的身份更加安全,

因此我们实际上找到
了一个很好的平衡点。

我们本可以走得更远。

但就我们所取得的平衡而言,
我认为这已经足够好了。

Sarah Chung:这整个过程
是给学生的,对吧?

我的意思是,有研究目标,

但其中一部分是
为了使麻省理工学院的校园总体受益,

然后大部分是学生,

因为他们是实地的靴子。

他们不仅是
建立所有基础设施的基石,

而且还必须自愿提供自己的数据
并下载此应用程序。

如果没有这些学生志愿者
在宿舍里倡导,

这不会发生。

没有安装程序,这不会发生。

没有学生注册,
这不会发生。

然后即使在他们注册之后,

如果没有他们的校准
,也不会发生。

但是,志愿者也确实
需要投入。

他们必须觉得他们从中
得到了一些东西。

我的很多想法

都涉及到我们如何
提高效率,减少他们的工作量,

以便他们能够
以更少的成本享受收益,

并且他们会做我们
希望他们做的事情。

我们会看到的,对吧?

因为我们正
处于推出 Eastgate 和 Ashdown 的风口浪尖

,我们将拭目以待。

Geeticka Chauhan:
当我与我的官员谈论

我们想要实施的不同政策

或我们想要举办的不同活动时,

了解接触者追踪
研究正在并行进行

是非常有帮助的

,我参与的官员

很兴奋。

其他宿舍校长的

许多问题主要是隐私问题

,以及
学生的信息将如何保存

以及
麻省理工学院医疗将如何使用这些信息。

宿舍长
们真正兴奋的另一件事是——

他们在想,

“是的,从宿舍开始这是一件非常好的
事情,

但他们也问朱莉

是否愿意
在实验室中部署它

。Przemyslaw Lasota:科学协议

的主要目标

评估数字接触者追踪
与手动接触者追踪的比较

,我们
在这项研究中有三个次要目标

:第一个是
了解

更多隐私保护

和更少隐私保护之间的权衡
数字接触者追踪方法;

此外,提供校准数据

以帮助其他研究人员
了解

蓝牙
信号强度和距离之间的关系

;最后,试图了解

用户对不同
数字接触者追踪方法的接受程度

。JS:我仍然对这一点感到惊讶,

我们正准备
全面启动这项研究,

因为聚集在一起的团队是一群从未一起

工作过的人

现在我们正在
虚拟地共同开发软件、硬件。

这是一支梦之队。

复杂性和规模
令我感到惊讶,


根据这

在六周
到两个月的时间里是如何结合在一起的,你不会知道它。

我们目前正在
向三个研究生宿舍推出

,然后是三个本科宿舍,

作为一种试点或

测试,

当本科生
在 9 月份以更高的水平返回时,我们可能能够做的更广泛的事情。

希望我们能够在秋季重新开放期间帮助
保持我们的社区更安全

,并提供

有关如何

在麻省理工学院之外更广泛地使用数字接触者追踪技术的宝贵知识。