Deploying decentralized, privacy-preserving proximity tracing

Avitabile, G., Botta, V., Iovino, V., and Visconti, I. Towards defeating mass surveillance and SARS-CoV-2: The Pronto-C2 fully decentralized automatic contact tracing system. IACR Cryptology ePrint Archive (2020), 493. https://eprint.iacr.org/2020/493.

Bahrain, Kuwait and Norway contact tracing apps among most dangerous for privacy. Amnesty International (2020), https://www.amnesty.org/en/latest/news/2020/06/bahrain-kuwait-norway-contact-tracing-apps-danger-for-privacy/.

Barthe, G. et al. PanCast: Listening to Bluetooth beacons for epidemic risk mitigation. CoRR abs/2011.08069 (November 2020), https://arxiv.org/abs/2011.08069.

Bay, J. et al. BlueTrace: A privacy-preserving protocol for community-driven contact tracing across borders. (2020), https://bluetrace.io/static/bluetrace_whitepaper-938063656596c104632def383eb33b3c.pdf.

Benzler, J. et al. Towards a common performance and effectiveness terminology for digital proximity tracing applications. CoRR abs/2012.12927 (December 2020), https://arxiv.org/abs/2012.12927.

Briers, M., Charalambides, M., and Holmes, C. Risk scoring calculation for the current NHSx contact tracing app. CoRR abs/2005.11057 (May 2020), https://arxiv.org/abs/2005.11057.

Canetti, R. et al. Privacy-preserving automated exposure notification. IACR Cryptology ePrint Archive (2020).

Canetti, R., Trachtenberg, A., and Varia, M. Anonymous collocation discovery: Harnessing privacy to tame the coronavirus (March 2020), https://arxiv.org/abs/2003.13670.

Castelluccia, C. et al. DESIRE: A third way for a European exposure notification system leveraging the best of centralized and decentralized systems. CoRR abs/2008.01621 (August 2020), https://arxiv.org/abs/2008.01621.

Chan, J. et al. PACT: Privacy sensitive protocols and mechanisms for mobile contact tracing. CoRR abs/2004.03544 (April 2020), https://arxiv.org/abs/2004.03544.

CWA Team. Epidemiological motivation of the transmission risk level. (October 2020), https://github.com/corona-warn-app/cwa-documentation/blob/main/transmission_risk.pdf.

Daniore, P., Ballouz, T., Menges, D., and von Wyl, V. The SwissCovid digital proximity tracing app after one year: Were expectations fulfilled? Swiss Medical. Weekly (September 2021).

Data protection and information security architecture. PEPP-PT (Apr. 2020), https://github.com/pepp-pt/pepp-pt-documentation/blob/master/10-data-protection/PEPP-PT-data-protection-information-security-architecture-Germany.pdf.

DP-3T Team. Privacy and security risk evaluation of digital proximity tracing systems (April 2020), https://github.com/DP-3T/documents/blob/master/Security%20analysis/Privacy%20and%20Security%20Attacks%20on%20Digital%20Proximity%20Tracing%20Systems.pdf.

DP-3T Team. Secure upload authorisation for digital proximity tracing (April 2020), https://github.com/DP-3T/documents/blob/master/DP3T%20-%20Upload%20Authorisation%20Analysis%20and%20Guidelines.pdf.

Ebbers, W., Hooft, L., van der Laan, N., and Metting, E. Evaluation CoronaMelder: An overview after 9 months. https://www.coronamelder.nl/media/Evaluatie_CoronaMelder_na_9_maanden_english.pdf.

European Interoperability Certificate Governance. A security architecture for contact tracing and warning apps. eHealth Network (April 2020), https://health.ec.europa.eu/publications/european-interoperability-certificate-governance-security-architecture-contact-tracing-and-warning_en.

Exposure notification---Cryptography specification. Google LLC and Apple Inc. (April 2020), https://blog.google/documents/69/Exposure_Notification_-_Cryptography_Specification_v1.2.1.pdf.

German restaurants object after police use COVID data for crime-fighting. Reuters (July 2020), https://www.reuters.com/article/us-health-coronavirus-germany-privacy-idUSKCN24W2K6.

Groschupp, F. et al. Sovereign smartphone: To enjoy freedom we have to control our phones. arXiv:2102.02743 (Feb. 2021).

Hargittai, E., Redmiles, E.M., Vitak, J., and Zimmer, M. Americans' willingness to adopt a COVID-19 tracking app. First Monday 25, 11 (Oct. 2020).

Hatke, G.F., et al. Using Bluetooth Low Energy (BLE) signal strength estimation to facilitate contact tracing for COVID-19. Pact Technical Report (2020).

Illmer, A. Singapore reveals Covid privacy data available to police. BBC (Jan. 2021), https://www.bbc.com/news/world-asia-55541001.

Kaptchuk, G. et al. How good is good enough for COVID19 apps? The influence of benefits, accuracy, and privacy on willingness to adopt. arXiv:2005.04343 (May 2020).

Kim, N. 'More scary than coronavirus': South Korea's health alerts expose private lives. The Guardian (March 2020), https://www.theguardian.com/world/2020/mar/06/more-scary-than-coronavirus-south-koreas-health-alerts-expose-private-lives.

Kostova, B., Gürses, S., and Troncoso, C. Privacy engineering meets software engineering. On the challenges of engineering Privacy By Design. (July 2020), arXiv:2007.08613.

Leith, D.J. and Farrell, S. Coronavirus contact tracing: Evaluating the potential of using Bluetooth received signal strength for proximity detection. Computer Communication Review 50, 4 (October 2020), 66--74.

Levy, I. High level privacy and security design for NHS COVID-19 contact tracing app. National Cyber Security Centre, U.K. (May 2020), https://www.ncsc.gov.uk/files/NHS-app-security-paper%20V0.1.pdf.

Lovett, T. et al. Inferring proximity from Bluetooth Low Energy RSSI with unscented Kalman smoothers. CoRR abs/2007.05057 (July 2020), https://arxiv.org/abs/2007.05057.

Lueks, W. et al. CrowdNotifier: Decentralized privacy-preserving presence tracing. In Proceedings on Privacy Enhancing Techniques 2021, 4 (July 2021), 350--368.

Rivest, R.L. et al. The PACT Protocol technical specification. PACT (April 2020), https://pact.mit.edu/wp-content/uploads/2020/11/The-PACT-protocol-specification-2020.pdf.

ROBERT: ROBust and privacy-presERving proximity Tracing. Inria PRIVATICS team and Fraunhofer AISEC (April 2020), https://github.com/ROBERT-proximity-tracing/documents/blob/master/previous_versions/ROBERT-specification-EN-v1_0.pdf.

Salathé, M. et al. Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland. Swiss Medical Weekly 150, 2020/5153 (December 2020).

Sterling, T. Personal data stolen from Dutch coronavirus track-and-trace programme. Reuters (2021), https://www.reuters.com/article/us-health-coronavirus-netherlands-datapr-idUSKBN29Y1H3.

SwissCovid Exposure Score Calculation. https://github.com/admin-ch/PT-System-Documents/blob/master/SwissCovid-ExposureScore.pdf.

TCN Coalition. TCN Protocol (2020), https://github.com/TCNCoalition/TCN.

Trieu, N. et al. Epione: Lightweight contact tracing with strong privacy. IEEE Data Engineering Bulletin 43, 2 (2020), 95--107. http://sites.computer.org/debull/A20june/p95.pdf.

Troncoso, C., et al. Decentralized privacy-preserving proximity tracing. CoRR abs/2005.12273 (2020), https://arxiv.org/abs/2005.12273.

White, N. Creepy bartender uses coronavirus contact tracing data to ask out a girl he gave a free drink to---as Australians are warned their personal information could be misused or stolen. Daily Mail Australia (July 2020), https://www.dailymail.co.uk/news/article-8516533/Creepy-bartender-uses-coronavirus-contact-tracing-data-ask-girl.html.

Wymant, C. et al. The epidemiological impact of the NHS COVID-19 App. Nature 594, 7863 (2021), 408--412.

Zhao, Q., Wen, H., Lin, Z., Xuan, D., and Shroff, N.B. On the accuracy of measured proximity of Bluetooth-based contact tracing apps. In Security and Privacy in Communication Networks 335, Springer (December 2020), 49--60.