论文标题
调和下一代流行病风险系统中的安全性和实用性
Reconciling Security and Utility in Next-Generation Epidemic Risk Mitigation Systems
论文作者
论文摘要
诸如最近的Covid-19之类的流行病需要主动接触痕迹和流行病学分析,以预测并随后包含感染传播。积极的措施需要大规模的数据收集,这同时引起了对用户隐私的担忧。为了响应Covid-19,开发的数字接触跟踪系统要么以用户隐私为代价收集了有效分析的广泛数据,要么是为了使用用户隐私而收集的最小数据,但在预测和减轻流行病风险方面无效。我们提出了Silmarillion,以准备未来的流行病,该系统将用户的隐私与丰富的数据收集相吻合,以提高实用程序。在Silmarillion中,用户设备记录了在战略位置安装的信标遇到的蓝牙。信标在信标安装站点上使用地理位置,位置类型和环境条件进一步丰富了相遇。这种丰富的信息使疾病参数的详细科学分析以及更准确的个性化暴露风险通知。同时,Silmarillion在与数字和手动接触跟踪中保证的水平相同的水平上为所有参与者和非参与者提供隐私。我们描述了Silmarillion的设计及其通信协议,以确保用户隐私和数据安全。我们还评估了使用低端物联网板构建的Silmarillion的原型,这表明功耗和用户潜伏期在实际部署中足够低。最后,我们简要地报告了大学建筑物内的小规模部署,作为概念证明。
Epidemics like the recent COVID-19 require proactive contact tracing and epidemiological analysis to predict and subsequently contain infection transmissions. The proactive measures require large scale data collection, which simultaneously raise concerns regarding users' privacy. Digital contact tracing systems developed in response to COVID-19 either collected extensive data for effective analytics at the cost of users' privacy or collected minimal data for the sake of user privacy but were ineffective in predicting and mitigating the epidemic risks. We present Silmarillion--in preparation for future epidemics--a system that reconciles user's privacy with rich data collection for higher utility. In Silmarillion, user devices record Bluetooth encounters with beacons installed in strategic locations. The beacons further enrich the encounters with geo-location, location type, and environment conditions at the beacon installation site. This enriched information enables detailed scientific analysis of disease parameters as well as more accurate personalized exposure risk notification. At the same time, Silmarillion provides privacy to all participants and non-participants at the same level as that guaranteed in digital and manual contact tracing. We describe the design of Silmarillion and its communication protocols that ensure user privacy and data security. We also evaluate a prototype of Silmarillion built using low-end IoT boards, showing that the power consumption and user latencies are adequately low for a practical deployment. Finally, we briefly report on a small-scale deployment within a university building as a proof-of-concept.