Privacy Guarantees of BLE Contact Tracing: A Case Study on COVIDWISE

Ahmed, Salman; Xiao, Ya; Taejoong,; Chung,; Fung, Carol; Yung, Moti; Danfeng,

doi:10.48550/arxiv.2111.08842

Cited by 1 publication

(1 citation statement)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Sect. V-B2), Ahmed et al claim that GAEN protects privacy of users and criticize that existing attacks are unrealistic [45]. However, they do not provide arguments and evidence for their claim, i.e., it is not clear how GAEN can defend against such attacks.…”

Section: B Survey On Existing Dct Schemes Apps and Challengesmentioning

confidence: 99%

Digital Contact Tracing Solutions: Promises, Pitfalls and Challenges

Nguyen¹,

Miettinen²,

Dmitrienko³

et al. 2022

Preprint

View full text Add to dashboard Cite

The COVID-19 pandemic has caused many countries to deploy novel digital contact tracing (DCT) systems to boost the efficiency of manual tracing of infection chains. In this paper, we systematically analyze DCT solutions and categorize them based on their design approaches and architectures. We analyze them with regard to effectiveness, security, privacy and ethical aspects and compare prominent solutions with regard to these requirements. In particular, we discuss shortcomings of the Google and Apple Exposure Notification API (GAEN) that is currently widely adopted all over the world. We find that the security and privacy of GAEN has considerable deficiencies as it can be compromised by severe large-scale attacks.We also discuss other proposed approaches for contact tracing, including our proposal TRACECORONA, that are based on Diffie-Hellman (DH) key exchange and aim at tackling shortcomings of existing solutions. Our extensive analysis shows that TRACECORONA fulfills the above security requirements better than deployed state-of-the-art approaches. We have implemented TRACECORONA and its beta test version has been used by more than 2000 users without any major functional problems 1 , demonstrating that there are no technical reasons requiring to make compromises with regard to the requirements of DCT approaches.

show abstract

Section: B Survey On Existing Dct Schemes Apps and Challengesmentioning

confidence: 99%