Privacy Analysis and Comparison of Pandemic Contact Tracing Apps = Privacy Analysis and Comparison of Pandemic Contact Tracing Apps

다국어 초록 (Multilingual Abstract)

During the period of epidemic prevention and control, contact tracing systems are developed in many countries, to stop or slow down the progression of COVID-19 contamination. However, the privacy issues involved in the use of contact tracing apps have also attracted people’s attention. First, we divide contact tracing techniques into two types: Bluetooth Low Energy (BLE) based and Global Positioning System (GPS) based techniques. In order to clear understand the system structure and its elements, we create data flow diagram (DFD) of each types. Second, we analyze the possible privacy threats contained in various types of contact tracing apps by applying LINDDUN, which is a threat modeling technique for personal information protection. Third, we make a comparison and analysis of various contact tracing techniques from privacy point of view. These studies can facilitate improve tracing and security performance to contact tracing apps through comparisons between different types.

참고문헌 (Reference)

1 "https://www.who.int/emergencies/diseases/novel-coronavirus-2019"

2 "https://www.technologyreview.com/2021/02/24/1014369/10-breakthrough-technologies-2021"

3 "https://coronavirus.jhu.edu/map.html"

4 M. Deng, "a privacy threat analysis framework : supporting the elicitation and fulfillment of privacy requirements" 16 : 3-32, 2011

5 S. O. Blacklow, "Usability, inclusivity, and content evaluation of COVID-19 contact tracing apps in the United States" 1982-1989, 2021

6 "Trace Together"

7 G. Avitabile, "Towards defeating mass surveillance and sars-cov-2: The pronto-c2 fully decentralized automatic contact tracing system" 2020

8 "TousAntiCovid"

9 R. Dingledine, "Tor: The second-generation onion router" 2004

10 R. L. Rivest, "The pact protocol specifications" 2020

11 A. Gangavarapu, "Target Privacy Threat Modeling for COVID-19 Exposure Notification Systems"

12 TCN Coalition, "TCN protocol for decentralized, privacy-preserving contact tracing"

13 "Stopp Corona"

14 M. L. Messai, "Short Paper : Privacy Comparison of Contact Tracing Mobile Applications for COVID-19"

15 L. Angela, "Security Vulnerabilities in Bluetooth Technology as Used in IoT" 7 (7): 2018

16 "Rankingn C-19"

17 "ROBERT: ROBust and privacy-presERving proximity Tracing Claude Castelluccia"

18 "PrivateTracer"

19 "PrivateKit: Safe Paths"

20 S. Clauß, "Privacy-enhancing identity management" 8-16, 2002

21 M. Hansen, "Privacy-enhancing identity management" 35-44, 2004

22 Apple, "Privacy preserving contact tracing"

23 "Pandoa"

24 "Pan-European Privacy-Preserving Proximity Tracing"

25 J. Chan, "Pact : Privacy sensitive protocols and mechanisms for mobile contact tracing"

26 Fraunhofer AISEC, "PANDEMIC CONTACT TRACING APPS : DP-3T, PEPP-PT NTK, AND ROBERT FROM A PRIVACY PERSPECTIVE"

27 N. Borisov, "Off-the-record communication, or, why not to use pgp" 77-84, 2004

28 "National Government Service Platform Epidemic Prevention Health Code"

29 "National Government Service Platform Epidemic Prevention Health Code"

30 "National Government Service Platform Epidemic Prevention Health Code"

31 "MySejahtera"

32 "Maximizing Privacy and Effectiveness in Covid-19 Apps" OpenMined Community

33 K. Wuyts, "LINDDUN privacy threat modeling: a tutorial" Department of Computer Science 2015

34 K. U. Wuyts, "LIND(D)UN privacy threat tree catalog" Department of Computer Science 2014

35 L. Sion, "Interaction-Based Privacy Threat Elicitation" 2018

36 "Hamagen"

37 Google, "Exposure notification api"

38 A. hostack, "Experiences Threat Modeling at Microsoft" Dept. of Computing 2008

39 L. S. Park, "Evaluation of Effectiveness of Digital GPS Contact Tracing Technology in Response to COVID-19" 21 (21): 341-345, 2020

40 M. J. Parker, "Ethics of instantaneous contact tracing using mobile phone apps in the control of the COVID-19 pandemic" 46 (46): 2020

41 D. Zhou, "Emerging Understanding of Etiology and Epidemiology of the Novel Coronavirus(COVID-19)infection in Wuhan, China"

42 A.A. Harith, "Digital Contact Tracing in Combating COVID-19 Pandemic in Malaysia, New Zealand and China"

43 M. Naor, "Deniable ring authentication" 481-498, 2002

44 "DP-3T"

45 "CovidSafe(UoW)"

46 "CovidAlert"

47 "Corona-Warn"

48 "CoronApp"

49 H. Cho, "Contact Tracing Mobile Apps for COVID-19 : Privacy Considerations and Related Trade-offs"

50 "CoEpi"

51 "COVIDSafe"

52 이호준, "COVID-19 접촉자 추적 기술에 대한 평가 기준 마련 및 보안성 비교 분석" 한국정보보호학회 30 (30): 1151-1166, 2020

53 "C19X"

54 J.Bay, "Bluetrace: A privacy-preservingprotocolforcommunity-driven contact tracing across borders"

55 R. Raskar, "Apps gone rogue : maintaining personal privacy in an epidemic"

56 M. Hatamian, "A privacy and security analysis of early-deployed COVID-19 contact tracing Android apps" 26 (26): 2021

57 B. Sowmiya, "A Survey on Security and Privacy Issues in Contact Tracing Application of Covid-19" 2 (2): 1-11, 2021

58 N. Ahmed, "A Survey of COVID-19 Contact tracing apps" 8 : 134577-134601, 2020

59 S. Wang, "A New System for Surveillance and Digital Contact Tracing for COVID-19: Spatiotemporal Reporting Over Network and GPS(Preprint)"