Digital Contact Tracing Solutions: Promises, Pitfalls and Challenges
Digital Contact Tracing Solutions: Promises, Pitfalls and Challenges
复制标题
数字接触者追踪解决方案：承诺、陷阱和挑战
DOI：
10.1109/tetc.2022.3216473
复制
发表时间：
2022
影响因子：
5.9
通讯作者：
Ivan Visconti
中科院分区：
文献类型：
--
作者：
T. D. Nguyen;Markus Miettinen;A. Dmitrienko;A. Sadeghi;Ivan Visconti
COVID-19大流行促使许多国家部署新型数字接触者追踪（DCT）系统，以提高人工追踪感染链的效率。在本文中，我们系统地分析了DCT解决方案，并根据其设计方法和架构进行分类。我们从有效性、安全性、隐私和道德方面对它们进行分析，并根据这些要求比较突出的解决方案。特别是，我们讨论了目前在世界各地广泛采用的谷歌和苹果曝光通知API（GAEN）的缺点。我们发现，GAEN的安全和隐私有相当大的缺陷，因为它可以受到严重的大规模攻击。我们还讨论了其他提议的接触者追踪方法，包括我们的提议TraceCORONA，该方法基于迪菲-赫尔曼（DH）密钥交换，旨在解决现有解决方案的缺点。我们广泛的分析表明，TraceCORONA比部署的最先进的方法更好地满足上述安全要求。我们已经实现了TraceCORONA，其beta测试版本已被2000多名用户使用，没有任何重大功能问题，1表明没有技术原因需要对DCT方法的要求做出妥协。
The COVID-19 pandemic has caused many countries to deploy novel digital contact tracing (DCT) systems to boost the efficiency of manual tracing of infection chains. In this paper, we systematically analyze DCT solutions and categorize them based on their design approaches and architectures. We analyze them with regard to effectiveness, security, privacy and ethical aspects and compare prominent solutions based on these requirements. In particular, we discuss shortcomings of the Google and Apple Exposure Notification API (GAEN) that is currently widely adopted all over the world. We find that the security and privacy of GAEN has considerable deficiencies as it can be compromised by severe large-scale attacks. We also discuss other proposed approaches for contact tracing, including our proposal TraceCORONA, that are based on Diffie-Hellman (DH) key exchange and aim at tackling shortcomings of existing solutions. Our extensive analysis shows that TraceCORONA fulfills the above security requirements better than deployed state-of-the-art approaches. We have implemented TraceCORONA and its beta test version has been used by more than 2000 users without any major functional problems,1 demonstrating that there are no technical reasons requiring to make compromises with regard to the requirements of DCT approaches.