Security and Privacy of Contact Tracing Protocols for COVID-19 Manuscript Received: 10 January 2022, Accepted: 13 February 2022, Published: 15 March 2022
Article Sidebar
Main Article Content
Abstract
Contact tracing is a way to track people who have been in contact with infected patients of COVID-19 and thereby effective control is achieved. Various countries have developed their own contact tracing applications which deploy the same or different protocol. It is of utmost importance to improve public awareness on the potential hidden risks of the respective protocols and applications and instill user confidence. The purpose of this research is to study the security and privacy of the existing contact tracing protocols to ensure that the security and privacy of users can be guaranteed. The protocols used by the applications include DP-3T protocol, TCN protocol, PEPP-PT protocol and BlueTrace protocol. The architecture of the protocols can be classified into centralised and decentralised architectures. In addition, the contact tracing applications in seven selected countries will be briefly analysed and compared. Some common user concerns are also outlined.
Article Details
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
References
R. Abrich and S. C. Gary, “Privacy Preserving Contact Tracing,” Info. Sys. Secur. Assoc., November, pp. 12-18, 2020.
C. Criddle and L. Kelion, “Coronavirus Contact-Tracing: World Split between Two Types of App,” BBC News, [Online] https://www.bbc.com/news/technology-52355028, 2020.
E. Pullicino, “Coronavirus and Contact Tracing Apps,” Bristows, [Online] https://www.bristows.com/news/coronavirus-and-contact-tracing-apps/, 2020.
J. Sanchez and. M. Feeney, “Protect Privacy When Contact Tracing,” CATO Institute, [Online] https://www.cato.org/publications/pandemics-policy/protect-privacy-when-contact-tracing#data-storage, 2020.
D. Pahwa and R. Beaudry, “The Architecture of Trust in Contact Tracing,” [Online] https://covidsafepaths.org/, 2020.
J. Bay, J. Kek. A. Tan, C. S. Hau, L. Yongquan, J. Tan and T. A. Quy, “BlueTrace: A Privacy-Preserving Protocol for Community-Driven Contact Tracing Across Borders,” Government Technology Agency, Singapore, pp. 1-9, 2020.
K. Servick, “COVID-19 Contact Tracing Apps Are Coming to a Phone Near You. How Will We Know Whether They Work?” ScienceInSider, [Online] https://doi.org/10.1126/science.abc9379, 2020.
A. Vaughan, “Bluetooth May not Work Well Enough to Trace Coronavirus Contacts,” New Scientist, [Online] https://www.newscientist.com/article/2243137-bluetooth-may-not-work-well-enough-to-trace-coronavirus-contacts/, 2020.
O. Hoimes, “Israel to Track Mobile Phones of Suspected Coronavirus Cases,” The Guardian, [Online] https://www.theguardian.com/world/2020/mar/17/israel-to-track-mobile-phones-of-suspected-coronavirus-cases, 2020.
B. J Stanley and J. S. Granick, “The Limits of Location Tracking in An Epidemic,” American Civil Liberties Union, pp. 1–9, 2020.
“A New Approach to Pandemics,” NOVID, [Online] Retrieved May 24, 2021, from https://www.novid.org/.
K. Carter, G. Berman, M. García-herranz, and V. Sekara, “Digital Contact Tracing and Surveillance During COVID-19 General and Child-specific Ethical Issues,” Unicef Office of Research, pp. 1-25, June, 2020.
“Coronavirus France: Cameras to Monitor Masks and Social Distancing,” BBC News (4 May 2020), [Online] https://www.bbc.com/news/world-europe-52529981.
S. Rosch, “DP3T Android Demo App,” [Online] https://github.com/DP-3T/dp3t-app-android-demo/blob/develop/README.md, 2020.
Veale, “DP3T - Decentralized Privacy-Preserving Proximity Tracing,” [Online] https://github.com/DP-3T/documents/blob/master/README.md, 2020.
H. Valence, “TCN Protocol,” [Online] https://github.com/TCNCoalition/TCN/blob/main/README.md, 2020.
“Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT) Documentation,” [Online] https://github.com/pepp-pt/pepp-pt-documentation/blob/master/README.md, 2020.
“What is BlueTrace? – TraceTogether FAQs,” [Online] https://support.tracetogether.gov.sg/hc/en-sg/articles/360044883814-What-is-BlueTrace-, 2020.
“MySejahtera Privacy Policy,” [Online] Retrieved March 20, 2021, from https://mysejahtera.malaysia.gov.my/privasi_en/.
M. J. M. Chowdhury, M. S. Ferdous, K. Biswas, N. Chowdhury and V. Muthukkumarasamy, “COVID-19 Contact Tracing: Challenges and Future Directions,” IEEE Access, vol. 8, 225703–225729, 2020.
“Aarogya Setu’s Data Access and Knowledge Sharing Protocol, 2020,” [Online] Retrieved May 17, 2021, from https://vidhilegalpolicy.in/blog/aarogya-setus-data-access-and-knowledge-sharing-protocol-2020/.