https://privacysafe.ai/health Who Is This Guy? Sean O’Brien, [email protected] • !ecturer at "ale La# School, $ybersecurity • &oun'er and head researcher at "ale (rivacy !a% • )ditor of The Privacy Issue, a ne# press outlet • &oun'ed (rivacySafe in Sep. *+,-, privacy.%y.desi/n IoT appliances Please reach out to me with questions! What Is PrivacySafe? PrivacySafe is a company that develops products from Free Software and Open Hardware components. Our products are %uilt on the new Bea/leBoar'.org BeagleBone® 1I. We’re 'eveloping a GN Health Edition, to %ring BeagleBone support to G23 Health )5%e''e'. Bea/leBone 1I is OSHW Certifie', %ut #e are also evaluatin/ other %oar's for future har'#are tar/ets. What Is GNU Health Embedded? GN Health is a Free"#i$re Health and Hospital %nformation System that runs on sin&le'$oard computers as “GN Health Em$edded) G23 Health )5%e''e' currently tar/ets 6asp%erry Pi 7. The G23 4ealth )5%e''e' team 'evelops ima/es %ase' on openS3S) an' up'ate ima/es often 9last &e%. *:, *+*+;. Support for the e<tremely popular 6asp%erry Pi is still important, even with support for Bea/leBone 1I. BeagleBoard.org BeagleBone® AI Open Hardware Basically, #e’re %uil'in/ a =e%ian.%ased version of G2U 4ealth )5%ed'e' an' tar/eting the most libre an' privacy-respecting sin/le.%oar' computer #e can fin'. 1''itionally, #e #ant to %un'le GNU 4ealth #ith privacy tech like Tor an' a ne# set of privacy.%y.'esign protocols called 72Web as a %ac>en' for our (rivacySync service. Specifics #ill %e ironed out in the next : 5onths. OS Design Choices *isclaimer: We are very much open to community feed$ac- and advice, and our current direction may chan&e. • De%ian G23/!inu< Stretch 9-.,*) #ith Turkey G23/!inu< 5ods • !atest G23 Health 97.?.7) an' Tryton S1O Web 3I (planned; • !et’s Encrypt config for SS!/T!S and easy net#orking setup • Cloud - IDE gives users a rich 'ev environ5ent and a $!I We’re building off of the excellent work of Turnkey GNU/Linux on user-friendly dialogs and menus for Debian-based appliances. This configuration console can be launched via SSH. We want to deliver services via the Web browser, but also need to be careful from a security perspective. Cloud 9 IDE may only be turned on by default for our Dev Kit versions. GNU Health Embedded Use Cases • *omiciliary Units (a-a (homes)1 • Nursing / 2cademia / Personal Health 3ecord Image Source: NPR.org / 4uarantined Populations 5 especially timely re: 6O7%*'89 Login to GNU Health appliance is done via the GNU Health client. COVID-19 Brainstorming • Open Science resources 0nextstrain.or&, others;1 • Quarantine Updates / #ocalized %nformation • Statistics Image Source: NPR.org / (Flatten =he 6urve) 2dvice Challenges & Food For Thought Bea&leBone vs. 3asp$erry Pi: Bea/leBone can %e set up very @uickly, acting as a Wi&i access point out.of.the.%o< and with a We% %rowser.%ase' config, as #ell as 3SB Stora/e Ga'/et. 6asp%erry Pi has an easy, hea'less CLI/'ialog setup via 6asp%ian, %ut it’s not availa%le on openS3S) 9%uil's use a 'isplay mana/er). 6ontainers+ We’' li>e to move to#ar' using either =ocker or !A=/!AC. The current G23 Health =ocker ima/es nee' up'ating, an' it may ma>e sense to start fresh with !A=. 2ddressin& " 6erts+ We nee' to create helpful 3Is for config of =2S options, T!S certs, and Tor .onion hi''en services. We have yet to /et G23 4ealth Client / Tryton running over Tor %ut that is an important /oal for privacy reasons. Resources: BeagleBoard & GNU Health / Official Bea&leBone 2% Wiki / Bea&leBone 2% Survival Guide / Official GN Health ,iki / =estin& GN Health / GN Health *emo *ata$ase / nofficial GN Health *ebian 3epos THANB YO3C !uis &alcDn an' the GN3 4ealth / GN3 Soli'ario teams Eason Kri'ner an' the BeagleBoar'.org tea5 • The GN3 4ealth )5%e''ed tea5 Our (rivacySafe customers an' supporters We’re starting small but #e’re ta>in/ big steps. !et us kno# #hat you thin>C https://privacysafe.ai/contact .