"Zhong Nanshan has no vaccine" is a rumor!Reason disclosure

Recently, a screenshot of the health code information of Zhong Nanshan, an academician of the Chinese Academy of Engineering, was widely circulated on various social platforms. Among them, the vaccine column showed "no vaccination record". Some netizens said that the name and ID number of Zhong Nanshan used the "Old and Young Health Code Help Inquiry" function, and the vaccination records displayed in various provinces were inconsistent.

Later, the public account of Shanghai "Liberation Daily" "Shanghai Network Rumor" stated that the news of "Zhong Nanshan did not hit a new crown vaccine" was not true. Vaccination information.

Although it has been rumored, the "old and young health code help inquiry" function has attracted public attention. The Nandu · Privacy Guard measured that through the "Old and Young Health Code Assistance Inquiry" function in the National Government Service Platform's epidemic prevention and health information code, it can indeed be seen For vaccination, some show unattended, and some do not show vaccine vaccination records. Alipay explained that this is because the vaccination information between various provinces has not yet been opened.

Is there a hidden danger of information leakage? Some experts believe that there is indeed existence. He suggested that you can adopt a variety of identity authentication mechanisms such as face recognition and mobile phone verification code, and give individuals room for choice. At the same time, the balance between the leakage risk of personal information and the risk of collecting risks must be considered.

The vaccine vaccination situation of various provinces is inconsistent

Recently, a screenshot of a health code suspected of Zhong Nanshan was widely circulated. The avatar in the picture is Zhong Nanshan, the name is "Zhong **", and the vaccine column shows "no vaccination record".

The screenshot of the health code of Zhong Nanshan is suspected to be on the Internet

Later, some media issued a document to the "Old Young Health Code Assistance inquiry" function through the national government service platform. Not consistent.

On the evening of June 20, the public account of the "Shanghai Network Rumor" posted a response to the matter. The article shows that after the verification, the screenshot of the Internet is similar to the screenshot of the "Health Treasure" applet in a certain place in the north. After testing, the inquiry procedure can only query the vaccination information of the residence or vaccination land for the vaccine of the residence or the place of vaccine, and does not support the health information of non -local people. Therefore, the news of "Zhong Nanshan has not vaccinated the new crown vaccine" was not true.

It is reported that in May last year, the People's Daily opened the live video of Zhong Nanshan vaccination. He also said in the video that "I have also vaccinated the domestic new crown vaccine recently, and it feels good."

Picture source network, Zhong Nanshan is vaccination

The Nandu Privacy Guard noticed that on the 21st, Alipay explained in the topic of "My Customer Service"-"Hot Follower" that after vaccination in province A, the relevant information could not be found in the health code or vaccine record in province B in province B. It is because the vaccination information between various provinces has not yet been opened, not the system abnormalities. It is recommended that users switch to the inocular or city's health code page to query the vaccination information, or through the "National Government Service Platform" applet- "" Inquiry function for new crown virus vaccination information.

Alipay explains

The Nandu · Privacy Guard also measured the immune -preventive health information code of the national government service platform. First of all, through WeChat, Alipay, or the national government service platform APP, enter the "Epidemic Prevention and Health Information Code" service, select "Old and Young Health Code Help Query", and enter the name and ID number of the inquiry to get its health code status.

Then, select "View Epidemic Prevention and Health Information Details" and "View more information", and you can see the health information displayed after scanning the code after scanning the code in various provinces across the country. Generally, the health code status and health report date. Show vaccine vaccination records.

Test measurement: The health information displayed after scaning the code after scaning the code in various provinces across the country

However, the vaccination records displayed in various places also have inconsistent query results. In the measured measurement, after entering the name and ID number of a person who had vaccinated the vaccine, some area inquiries were displayed as "unpredictable" vaccine, and the other region showed "two stitches". Do not show vaccine vaccination.

It is worth noting that the above -mentioned "old and young health codes help inquiry" function can only inquire about the health of people under 16 and over 60 years old. According to the "Epidemic Prevention and Health Information Code" on the query page statement, "the data is constantly converging and improved, and the query results are for reference only."

Beijing Health Bao's other person's inspection function has caused information leakage

This is not the first time that public figures have been disclosed about health code and other related information. According to Nandu previous reports, in December 2020, there were screenshots of the nucleic acid detection photos of more than 70 stars on the Internet. And specific test time.

The reason why these stars registered in health treasures are easily obtained by others. They also use the query function. As long as you enter the name and ID number in Beijing Health Treasure's "Examination of Others' Nucleic acid Test results", you can enter the nucleic acid detection page of the inspector to obtain the face photos. Although the above features show "need face recognition", it has not triggered.

A few days later, the relevant departments adjusted this function and used Beijing Health Treasure to check the results of others' nucleic acid test results.

In fact, in order to avoid being easily obtained by others by others, the Nandu Privacy Guard noticed that many applets have made inquiries such as "alignment results of other people's nucleic acid testing" and "old and young health code inquiry" Limited. For example, when entering the "Old and Young Health Code Inquiry" function to enter the national epidemic prevention and health information code, the details of the page wrote that in order to protect personal privacy, the query results page will be automatically closed after 10 seconds. Caches or related data.

According to the actual measurement of the Nandu · Privacy Guard, the page will indeed automatically close the page after ten seconds, and in the health code display page, the name and ID number of the inquiry will be anonymous.

Health code display page

As early as 2020 Beijing Health Bao launched the "Others Inspection" function, Pan Feng, deputy director of the Beijing Municipal Bureau of Economic and Information Technology, emphasized that this function sets a series of information that can not be cached, the page shows only 10 seconds, and a series of desensitization processing information is set. Safety measures will not leak personal privacy. In addition, Hangzhou, Shandong and other places have similar promises.

Researching for face recognition, verification code, etc.

You only need to enter the name and ID number to obtain health information such as the inquiry including health code, nucleic acid results, and vaccination. Is there any hidden danger of information leakage? Is there any further optimization space for its query and display?

The director of the Digital Economy and Legal Innovation Research Center of the University of Foreign Economic and Trade may bluntly say that there may be potential information security hazards. However, he also pointed out that sharing information is inevitable in the Internet era, and the balance between personal information security and convenience of personal information is indeed more complicated and difficult.

He said that it is necessary to better guarantee personal information security, which can adopt a variety of identity authentication mechanisms and give individuals room for choice, such as using the third layer identity authentication mechanism. Perform the verification again. However, this "can indeed be protected better, but it also means that you need to provide more personal information", and you also need to consider the balance between the risk of personal information leakage and the risk of collecting personal information.

In addition, the convenience of using the license is also an important factor that needs to be considered. "Inquiring the health code often occurs when entering a public place to identify it. If the query time is too long, it may cause a lot of inconvenience."

Zhang Xin, Executive Director of the Digital Economy and Legal Innovation Research Center of Foreign Economic and Trade University, suggested that the scenes and conditions that allow the inspection to be allowed to be inspected should be clearly stipulated to avoid the function of random inspection and abuse of inspection. In addition to using face recognition for certification, other security certification methods can also be allowed to prevent health codes from being accessible by unauthorized clients.

Nandugz, N video reports

Writing: Nandu reporter Fan Wenyang intern Cheng Yuqi

- END -