[论文解读] Apps Gone Rogue: Maintaining Personal Privacy in an Epidemic

Ramesh Raskar, Isabel Schunemann+30 more|arXiv (Cornell University)|Mar 19, 2020

COVID-19 Digital Contact Tracing参考文献 9被引用 75

一句话总结

本论文综述了移动接触者追踪方法，突出隐私风险并提出隐私保护、开源解决方案，如 Private Kit: Safe Paths 用于疫情遏制。

ABSTRACT

Containment, the key strategy in quickly halting an epidemic, requires rapid identification and quarantine of the infected individuals, determination of whom they have had close contact with in the previous days and weeks, and decontamination of locations the infected individual has visited. Achieving containment demands accurate and timely collection of the infected individual's location and contact history. Traditionally, this process is labor intensive, susceptible to memory errors, and fraught with privacy concerns. With the recent almost ubiquitous availability of smart phones, many people carry a tool which can be utilized to quickly identify an infected individual's contacts during an epidemic, such as the current 2019 novel Coronavirus crisis. Unfortunately, the very same first-generation contact tracing tools have been used to expand mass surveillance, limit individual freedoms and expose the most private details about individuals. We seek to outline the different technological approaches to mobile-phone based contact-tracing to date and elaborate on the opportunities and the risks that these technologies pose to individuals and societies. We describe advanced security enhancing approaches that can mitigate these risks and describe trade-offs one must make when developing and deploying any mass contact-tracing technology. With this paper, our aim is to continue to grow the conversation regarding contact-tracing for epidemic and pandemic containment and discuss opportunities to advance this space. We invite feedback and discussion.

研究动机与目标

• 在疫情期间倡导隐私感知的流行病学接触追踪。
• 对广播、定向广播、单播、参与式共享，以及 Private Kit: Safe Paths 进行分类。
• 识别对确诊携带者、用户、商家和非使用者的隐私风险，并讨论同意与包容性。
• 提出缓解措施与权衡，以在公共卫生利益与隐私和安全之间取得平衡。
• 倡导以公民为中心的开源、去中心化解决方案，以提高信任和采用率。

提出的方法

• 回顾并比较移动接触追踪的不同技术方法（广播、定向广播、单播、参与式共享）。
• 将 Private Kit: Safe Paths 描述为开源、隐私优先的拉取模型解决方案。
• 讨论每种方法的风险映射与效用–隐私权衡。
• 提出安全、同意与包容性考虑及缓解策略。
• 提出以去中心化和数据最小化为重点的分阶段开发与部署路径。

实验结果

研究问题

• RQ1 移动接触追踪的主要技术方法及其隐私影响是什么？
• RQ2 如何通过隐私保护、以公民为中心的设计（如 Private Kit: Safe Paths）在保留公共卫生效用的同时降低风险？
• RQ3 广播、单播和参与式分享模型在隐私、同意与公平方面的关键挑战是什么？
• RQ4 在遏制数据效用与保护个人隐私之间存在哪些权衡？
• RQ5 开源、去中心化架构如何提高信任和采用率？

主要发现

• 在广播、定向广播、单播、参与式分享等模式下，对确诊携带者、用户、本地商家以及非用户的隐私风险都很明显。
• 政府主导的广播方法可能暴露身份并招致被确诊者活动地点的骚扰。
• Private Kit: Safe Paths 提供以隐私为先的模型，最小化集中数据收集并在不需要中央数据访问的情况下实现暴露通知。
• 在实践中，同意机制和数据最小化至关重要但常常不足；需要包容、可获取的设计。
• 开源、去中心化方法可以增强信任、安全性和可审计性，降低监控风险，同时支持遏制工作。