Cwa-wishlist: Improve response to scanning non-CWA lab QR code

[MikeMcC399]

Current Implementation

Some labs issue QR codes after Corona testing which use a system that is not compatible with CWA QA codes (see https://github.com/corona-warn-app/cwa-wishlist/issues/270#issuecomment-764986222).

If a user scans such a QR code the error message is correct, but it doesn't distinguish between a foreign QR code and a CWA QR code which has already been registered.

Steps to reproduce

CWA Android version 1.10.1

1. Open CWA
2. Tap NEXT STEPS > Test with QR Code
3. ACCEPT (Your Consent)
4. Position the QR code in the frame
   This QR code contains the text "DE12345678"

1. Note the error message shown after scanning
   

Suggested Enhancement

The scanned QR code should be checked locally in the app to determine whether it has the right format.

The format should be
https://localhost/?XXXXXX-XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX for instance
https://localhost/?3D6D08-3567F3F2-4DCF-43A3-8737-4CD1F87D6FDA

If the QR code does not correspond to this format, then the error message should say so, and should not say that the code might have been registered on another smartphone already.

A special case could also be made if the user somehow had access to the 10C/OECD lab form and scanned this in. The format of the the lab QR code is
XXXXXX-XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX for instance
3D6D08-3567F3F2-4DCF-43A3-8737-4CD1F87D6FDA

If the QR code scanned in is not recognisable as a CWA QR code, then the app could display an example of a correct form (Muster 10C).

If the user determines that they have attempted to scan in a CWA QR code from the correct form, and the QR code is rejected due to formatting issues, the user should be advised where they can report this problem.

Expected Benefits

Clearer differentiation of error conditions leading to better user satisfaction and resolution.

References

1. https://www.kbv.de/media/sp/Ansichtsexemplar_Muster10C.pdf

2. https://www.kbv.de/media/sp/Ansichtsexemplar_MusterOEGD.pdf

3. ftp://ftp.kbv.de/ita-update/Blankoformulare/10C_OEGD/KBV_ITA_VGEX_Implementierungshinweise_10C_OEGD.pdf
   LEITFADEN ZUR IMPLEMENTIERUNG MUSTER 10C/E UND MUSTER OEGD/E 15. DEZEMBER 2020 VERSION: 1.04

---

Internal Tracking ID: EXPOSUREAPP-4721

[dsarkar]

@MikeMcC399 actually, what do you think about extending your proposal:

• Additionally, the notification should remind at that stage to get a teleTAN from the hotline.

[MikeMcC399]

@dsarkar

what do you think about extending your proposal:

• Additionally, the notification should remind at that stage to get a teleTAN from the hotline.

That is not the right time to be proposing requesting a teleTAN. At the time of scanning a QR code, the user is registering a Corona test. They do not (normally) know yet if the test is positive. A teleTAN should only be requested if the user has already received a positive test result and:

1. has received a QR code for CWA and it didn't work or
2. has not been prompted on the device to share the result or
3. wants to report a positive test result on an additional device

So, no the proposal should not be extended.

[Ein-Tim]

I disagree. I already heard from some people that there are some labs who only issue the QR-Code when somebody is tested positive (yes, I know this is not how it is supposed to work - but I think the labs are doing this because they have too much work to do).
If now the QR-Code the lab issued after the test was positive is not a valid CWA QR-Code, I don't think there would be a problem with adding (for example):

"If you know that you have tested positive for COVID-19, you can call the Verification Hotline to get a TeleTAN and warn other users."

to the error message.

But it's your proposal so of course you decide, just wanted to add that. 🙂

[MikeMcC399]

@Ein-Tim / @dsarkar
I take your comments on board. So yes, add the point to recommend requesting a TAN (in the app it is not called teleTAN) if the user has already received a positive test result.

[dsarkar]

@MikeMcC399 @Ein-Tim

Understood.

• Ideally QR code scan happens at an early stage and the test result is unknown (TAN is not applicable)
• rare (?) case: User tries to scan QR code only when he received a positive test result. QR test fails possibly and the user should be aware of the TAN-option.

I will include this in your proposal as you agreed already.

Thanks everybody!

[dsarkar]

Internal Tracking ID: EXPOSUREAPP-4721

Updates will be published here.