A Critique of the Google Apple Exposure Notification (GAEN) Framework
- URL: http://arxiv.org/abs/2012.05097v2
- Date: Tue, 12 Jan 2021 09:21:30 GMT
- Title: A Critique of the Google Apple Exposure Notification (GAEN) Framework
- Authors: Jaap-Henk Hoepman
- Abstract summary: Digital contact tracing has been proposed as a tool to support the health authorities in their quest to determine who has been in close and sustained contact with a person infected by the coronavirus.
In April 2020 Google and Apple released the Google Apple Exposure Notification framework, as a decentralised and more privacy friendly platform for contact tracing.
We argue that this creates a dormant functionality for mass surveillance at the operating system layer.
- Score: 1.7513645771137178
- License: http://creativecommons.org/licenses/by/4.0/
- Abstract: As a response to the COVID-19 pandemic digital contact tracing has been
proposed as a tool to support the health authorities in their quest to
determine who has been in close and sustained contact with a person infected by
the coronavirus. In April 2020 Google and Apple released the Google Apple
Exposure Notification (GAEN) framework, as a decentralised and more privacy
friendly platform for contact tracing. The GAEN framework implements exposure
notification mostly at the operating system layer, instead of fully at the
app(lication) layer. In this paper we study the consequences of this approach.
We argue that this creates a dormant functionality for mass surveillance at the
operating system layer. We show how it does not technically prevent the health
authorities from implementing a purely centralised form of contact tracing
(even though that is the stated aim). We highlight that GAEN allows Google and
Apple to dictate how contact tracing is (or rather isn't) implemented in
practice by health authorities, and how it introduces the risk of function
creep.
Related papers
- Protect Your Score: Contact Tracing With Differential Privacy Guarantees [68.53998103087508]
We argue that privacy concerns currently hold deployment back.
We propose a contact tracing algorithm with differential privacy guarantees against this attack.
Especially for realistic test scenarios, we achieve a two to ten-fold reduction in the infection rate of the virus.
arXiv Detail & Related papers (2023-12-18T11:16:33Z) - CoAvoid: Secure, Privacy-Preserved Tracing of Contacts for Infectious
Diseases [25.014640577594566]
This paper proposes CoAvoid, a decentralized, privacy-preserved contact tracing system.
CoAvoid leverages the Google/Apple Exposure Notification (GAEN) API to achieve decent device compatibility and operating efficiency.
Compared with four state-of-art contact tracing applications, CoAvoid can reduce upload data by at least 90% and simultaneously resist wormhole and replay attacks.
arXiv Detail & Related papers (2022-01-20T12:19:21Z) - Privacy-Preserving Infection Exposure Notification without Trust in
Third Parties [0.0]
We propose a privacy-preserving exposure notification under situations where none of the middle entities can be trusted.
We show that the level of verifiability is much higher with our proposed design if a consumer group were to verify the privacy protections of the deployed systems.
arXiv Detail & Related papers (2021-03-13T09:47:45Z) - Trust and Transparency in Contact Tracing Applications [81.07729301514182]
The global outbreak of COVID-19 has led to efforts to manage and mitigate the continued spread of the disease.
One of these efforts include the use of contact tracing to identify people who are at-risk of developing the disease through exposure to an infected person.
There has been significant interest in the development and use of digital contact tracing solutions to supplement the work of human contact tracers.
The collection and use of sensitive personal details by these applications has led to a number of concerns by the stakeholder groups with a vested interest in these solutions.
arXiv Detail & Related papers (2020-06-19T20:29:24Z) - Mind the GAP: Security & Privacy Risks of Contact Tracing Apps [75.7995398006171]
Google and Apple have jointly provided an API for exposure notification in order to implement decentralized contract tracing apps using Bluetooth Low Energy.
We demonstrate that in real-world scenarios the GAP design is vulnerable to (i) profiling and possibly de-anonymizing persons, and (ii) relay-based wormhole attacks that basically can generate fake contacts.
arXiv Detail & Related papers (2020-06-10T16:05:05Z) - CoVista: A Unified View on Privacy Sensitive Mobile Contact Tracing
Effort [16.33086478979547]
The software created by Apple and Google enables individuals to track their own potential exposure through collated exposure notifications.
The same software prohibits location tracking, denying key information needed by public health officials for robust contract tracing.
This information is needed to treat and isolate COVID-19 positive people, identify transmission hotspots, and protect against continued spread of infection.
arXiv Detail & Related papers (2020-05-27T05:09:41Z) - Decentralized Privacy-Preserving Proximity Tracing [50.27258414960402]
DP3T provides a technological foundation to help slow the spread of SARS-CoV-2.
System aims to minimise privacy and security risks for individuals and communities.
arXiv Detail & Related papers (2020-05-25T12:32:02Z) - COVI White Paper [67.04578448931741]
Contact tracing is an essential tool to change the course of the Covid-19 pandemic.
We present an overview of the rationale, design, ethical considerations and privacy strategy of COVI,' a Covid-19 public peer-to-peer contact tracing and risk awareness mobile application developed in Canada.
arXiv Detail & Related papers (2020-05-18T07:40:49Z) - Decentralised, privacy-preserving Bayesian inference for mobile phone
contact tracing [0.0]
Many countries are gearing up to use smart-phone apps to perform contact tracing.
Apple/Google partnership to introduce contact-tracing functionality to iOS and Android.
Privacy preserving nature of Apple/Google contact tracing algorithm means that centralised curation of these decisions is not possible.
We present a decentralised algorithm that estimates the Bayesian posterior probability of viral transmission events.
arXiv Detail & Related papers (2020-05-11T13:13:36Z) - Digital Ariadne: Citizen Empowerment for Epidemic Control [55.41644538483948]
The COVID-19 crisis represents the most dangerous threat to public health since the H1N1 pandemic of 1918.
Technology-assisted location and contact tracing, if broadly adopted, may help limit the spread of infectious diseases.
We present a tool, called 'diAry' or 'digital Ariadne', based on voluntary location and Bluetooth tracking on personal devices.
arXiv Detail & Related papers (2020-04-16T15:53:42Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.