SpreadMeNot: A Provably Secure and Privacy-Preserving Contact Tracing Protocol
IEEE Transactions on Dependable and Secure Computing
; : 1-17, 2022.
Article
in English
| Scopus | ID: covidwho-1948848
ABSTRACT
A plethora of contact tracing apps have been developed and deployed in several countries around the world in the battle against Covid-19. However, people are rightfully concerned about the security and privacy risks of such applications. To address these issues, in this paper we provide two main contributions. First, we present an in-depth analysis of the security and privacy characteristics of the most prominent contact tracing protocols, under both passive and active adversaries. The results of our study indicate that all protocols are vulnerable to a variety of attacks, mainly due to the deterministic nature of the underlying cryptographic protocols. Our second contribution is the design and implementation of SpreadMeNot, a novel contact tracing protocol that can defend against most passive and active attacks, thus providing strong (provable) security and privacy guarantees that are necessary for such a sensitive application. Our detailed analysis, both formal and experimental, shows that SpreadMeNot satisfies security, privacy, and performance requirements, hence being an ideal candidate for building a contact tracing solution that can be adopted by the majority of the general public, as well as to serve as an open-source reference for further developments in the field. IEEE
Bluetooth; contact tracing; COVID-19; cryptography; Elliptic curve cryptography; Elliptic curves; Global navigation satellite system; privacy; Protocols; security; Standards; Geometry; Network protocols; Network security; Privacy-preserving techniques; Public key cryptography; Curve cryptography; Elliptic curve; Global Navigation Satellite Systems; Provably secure; Security and privacy
Full text:
Available
Collection:
Databases of international organizations
Database:
Scopus
Language:
English
Journal:
IEEE Transactions on Dependable and Secure Computing
Year:
2022
Document Type:
Article
Similar
MEDLINE
...
LILACS
LIS