CoAvoid: Secure, Privacy-Preserved Tracing of Contacts for Infectious Diseases
arXiv:2201.08133 · doi:10.1109/JSAC.2022.3211547
Abstract
To fight against infectious diseases (e.g., SARS, COVID-19, Ebola, etc.), government agencies, technology companies and health institutes have launched various contact tracing approaches to identify and notify the people exposed to infection sources. However, existing tracing approaches can lead to severe privacy and security concerns, thereby preventing their secure and widespread use among communities. To tackle these problems, this paper proposes CoAvoid, a decentralized, privacy-preserved contact tracing system that features good dependability and usability. CoAvoid leverages the Google/Apple Exposure Notification (GAEN) API to achieve decent device compatibility and operating efficiency. It utilizes GPS along with Bluetooth Low Energy (BLE) to dependably verify user information. In addition, to enhance privacy protection, CoAvoid applies fuzzification and obfuscation measures to shelter sensitive data, making both servers and users agnostic to information of both low and high-risk populations. The evaluation demonstrates good efficacy and security of CoAvoid. Compared with four state-of-art contact tracing applications, CoAvoid can reduce upload data by at least 90% and simultaneously resist wormhole and replay attacks in various scenarios.
References in corpus (7)
- A Survey of COVID-19 Contact Tracing Apps
- PACT: Privacy Sensitive Protocols and Mechanisms for Mobile Contact Tracing
- Epione: Lightweight Contact Tracing with Strong Privacy
- WiFiTrace: Network-based Contact Tracing for Infectious Diseases Using Passive WiFi Sensing
- IoTrace: A Flexible, Efficient, and Privacy-Preserving IoT-enabled Architecture for Contact Tracing
- Using Bluetooth Low Energy (BLE) Signal Strength Estimation to Facilitate Contact Tracing for COVID-19
- Cross Hashing: Anonymizing encounters in Decentralised Contact Tracing Protocols