DEMORGAN
Feasibility study on the automated data flow analysis of mobile health applications
Start: 07/2021
End: 03/2022
More and more people are using apps to manage sensitive vital data such as heart rate, blood pressure, or sleep cycles. However, it often remains unclear which data is transmitted to which servers in the background—frequently without explicit consent. The Datenkapsel (Data Capsule) project addresses this issue: as part of a feasibility study, we are investigating how data flows in health apps can be made transparent for users and specifically controlled through intuitive "encapsulation". We are creating the technological foundation to ensure that patients regain full control over their digital information.
The project aims to significantly strengthen the informational self-determination of users of mobile health applications. Since mobile operating systems (Android/iOS) currently offer few ways to track the network traffic of individual apps, data usage often remains a "black box" for laypersons and even for experts.
The project is designed as a feasibility study that develops technical and communicative solutions centered around four key research questions:
Local Analysis: Investigating the extent to which data flows can be analyzed directly on the end device (e.g., through sandboxing/work profiles or TLS decryption).
Central Test Environment: Building a controlled infrastructure in which apps from stores can be automatically tested for their communication behavior.
Automated Interaction: Developing methods for simulating user input and wearable interactions to provoke and evaluate data flows prior to actual use.
Transparency & Intervention: Analyzing various data formats (e.g., JSON) and developing concepts for a clear presentation of results to the user, including the possibility of targeted communication blockin
Technical Security Testing: Through our IT Security Competence Center, we conduct in-depth analyses of app communication and assess risks related to encryption and data protection.
Medical IT Expertise: We draw on extensive experience from projects such as TherapyBuilder and Emasin to define practical requirements for health apps.
AI & Data Analysis: We develop intelligent algorithms for automated pattern recognition in data streams and for the simulation of user interactions.
Knowledge and Technology Transfer: The FZI translates complex technical findings into intuitive concepts to empower users to make informed decisions about their data.