A Critique of Immunity Passports and W3C Decentralized Identifiers

• URL: http://arxiv.org/abs/2012.00136v1
• Date: Mon, 30 Nov 2020 22:10:43 GMT
• Title: A Critique of Immunity Passports and W3C Decentralized Identifiers
• Authors: Harry Halpin
• Abstract summary: There has been a push for immunity passports' and even technical proposals. These schemes are envisaged to be used for sharing COVID-19 test and vaccination results in general. Our analysis shows that this group of technical identity standards are based on under-specified and often non-standardized documents.
• Score: 7.6146285961466
• License: http://creativecommons.org/licenses/by-sa/4.0/
• Abstract: Due to the widespread COVID-19 pandemic, there has been a push for `immunity passports' and even technical proposals. Although the debate about the medical and ethical problems of immunity passports has been widespread, there has been less inspection of the technical foundations of immunity passport schemes. These schemes are envisaged to be used for sharing COVID-19 test and vaccination results in general. The most prominent immunity passport schemes have involved a stack of little-known standards, such as Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs) from the World Wide Web Consortium (W3C). Our analysis shows that this group of technical identity standards are based on under-specified and often non-standardized documents that have substantial security and privacy issues, due in part to the questionable use of blockchain technology. One concrete proposal for immunity passports is even susceptible to dictionary attacks. The use of `cryptography theater' in efforts like immunity passports, where cryptography is used to allay the privacy concerns of users, should be discouraged in standardization. Deployment of these W3C standards for `self-sovereign identity' in use-cases like immunity passports could just as well lead to a dangerous form identity totalitarianism.

Related papers

• SecureVAX: A Blockchain-Enabled Secure Vaccine Passport System [2.3310773398750495]
  A vaccine passport serves as documentary proof, providing passport holders with greater freedom while roaming around during pandemics. Key challenges faced by the digital vaccine passport system include passport forgery, unauthorized data access, and inaccurate information input by vaccination centers. Our solution integrates off-chain and on-chain cryptographic computations, facilitating secure communication among various entities.
  arXiv  Detail & Related papers  (2024-07-18T18:45:43Z)
• Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective [53.24281798458074]
  Face Recognition Systems (FRS) have increasingly integrated into critical applications, including surveillance and user authentication. Recent studies have revealed vulnerabilities in FRS to adversarial (e.g., adversarial patch attacks) and backdoor attacks (e.g., training data poisoning)
  arXiv  Detail & Related papers  (2024-05-21T13:34:23Z)
• Tamper-Evident Pairing [55.2480439325792]
  Tamper-Evident Pairing (TEP) is an improvement of the Push-Button configuration (PBC) standard. TEP relies on the Tamper-Evident Announcement (TEA), which guarantees that an adversary can neither tamper a transmitted message without being detected, nor hide the fact that the message has been sent. This paper provides a comprehensive overview of the TEP protocol, including all information needed to understand how it works.
  arXiv  Detail & Related papers  (2023-11-24T18:54:00Z)
• Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks [68.20436971825941]
  Federated learning (FL) provides an efficient paradigm to jointly train a global model leveraging data from distributed users. Several studies have shown that FL is vulnerable to poisoning attacks. To protect the privacy of local users, FL is usually trained in a differentially private way.
  arXiv  Detail & Related papers  (2022-09-08T21:01:42Z)
• Attacks on Deidentification's Defenses [0.4974890682815778]
  We present three new attacks on Quasi-identifier-based deidentification techniques. First, we introduce a new class of privacy attacks called downcoding attacks. Second, we convert the downcoding attacks into powerful predicate singling-out attacks. Third, we use LinkedIn.com to reidentify 3 students in a $k$-anonymized dataset published by EdX.
  arXiv  Detail & Related papers  (2022-02-27T22:50:36Z)
• Biometrics: Trust, but Verify [49.9641823975828]
  Biometric recognition has exploded into a plethora of different applications around the globe. There are a number of outstanding problems and concerns pertaining to the various sub-modules of biometric recognition systems.
  arXiv  Detail & Related papers  (2021-05-14T03:07:25Z)
• On an innovative architecture for digital immunity passports and vaccination certificates [0.0]
  This paper proposes an architecture that provides a digital, decentralized, portable, immutable, and non-refutable health status cryptographic proof. It can be used to evaluate the risk of allowing individuals to return to work, travel, and public life activities.
  arXiv  Detail & Related papers  (2021-03-06T15:35:24Z)
• DHP Framework: Digital Health Passports Using Blockchain -- Use case on international tourism during the COVID-19 pandemic [0.0]
  Digital Contact Tracing is not suitable for proactively preventing the spread of a disease. We discuss the concept of a Health Passport as a means of verifying that individuals are disease risk-free. We present the DHP Framework that uses a private blockchain and Proof of Authority for issuing Digital Health Passports.
  arXiv  Detail & Related papers  (2020-05-18T17:50:41Z)
• Cross-ethnicity Face Anti-spoofing Recognition Challenge: A Review [79.49390241265337]
  Chalearn Face Anti-spoofing Attack Detection Challenge consists of single-modal (e.g., RGB) and multi-modal (e.g., RGB, Depth, Infrared (IR)) tracks. This paper presents an overview of the challenge, including its design, evaluation protocol and a summary of results.
  arXiv  Detail & Related papers  (2020-04-23T06:43:08Z)
• Digital Ariadne: Citizen Empowerment for Epidemic Control [55.41644538483948]
  The COVID-19 crisis represents the most dangerous threat to public health since the H1N1 pandemic of 1918. Technology-assisted location and contact tracing, if broadly adopted, may help limit the spread of infectious diseases. We present a tool, called 'diAry' or 'digital Ariadne', based on voluntary location and Bluetooth tracking on personal devices.
  arXiv  Detail & Related papers  (2020-04-16T15:53:42Z)
• COVID-19 Antibody Test / Vaccination Certification: There's an app for that [1.1744028458220426]
  A COVID-19 'Immunity Passport' has been mooted as a way to enable individuals to return back to work. We develop a prototype mobile phone app and requisite decentralized server architecture that facilitates instant verification of tamper-proof test results.
  arXiv  Detail & Related papers  (2020-04-15T22:42:48Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.