PAN-DOMAIN: Privacy-preserving Sharing and Auditing of Infection Identifier Matching

Abramson, Will; Buchanan, William J; Sayeed, Sarwar; Pitropakis, Nikolaos; Lo, Owen

Abstract

The spread of COVID-19 has highlighted the need for a robust contact tracing infrastructure that enables infected individuals to have their contacts traced, and followed up with a test. The key entities involved within a contact tracing infrastructure may include the Citizen, a Testing Centre (TC), a Health Authority (HA), and a Government Authority (GA). Typically, these different domains need to communicate with each other about an individual. A common approach is when a citizen discloses his personally identifiable information to both the HA a TC, if the test result comes positive, the information is used by the TC to alert the HA. Along with this, there can be other trusted entities that have other key elements of data related to the citizen. However, the existing approaches comprise severe flaws in terms of privacy and security. Additionally, the aforementioned approaches are not transparent and often being questioned for the efficacy of the implementations. In order to overcome the challenges, this paper outlines the PAN-DOMAIN infrastructure that allows for citizen identifiers to be matched amongst the TA, the HA and the GA. PAN-DOMAIN ensures that the citizen can keep control of the mapping between the trusted entities using a trusted converter, and has access to an audit log.

Citation

Abramson, W., Buchanan, W. J., Sayeed, S., Pitropakis, N., & Lo, O. (2022). PAN-DOMAIN: Privacy-preserving Sharing and Auditing of Infection Identifier Matching. In 14th International Conference on Security of Information and Networks. https://doi.org/10.1109/SIN54109.2021.9699138

• Conference Name: 14th International Conference on Security of Information and Networks
• Conference Location: Edinburgh [Online]
• Start Date: Dec 15, 2021
• End Date: Dec 17, 2021
• Acceptance Date: Dec 5, 2021
• Online Publication Date: Feb 10, 2022
• Publication Date: 2022
• Deposit Date: Dec 7, 2021
• Publicly Available Date: Dec 7, 2021
• Publisher: Institute of Electrical and Electronics Engineers
• Book Title: 14th International Conference on Security of Information and Networks
• DOI: https://doi.org/10.1109/SIN54109.2021.9699138
• Keywords: COVID-19; contact tracing; pseudonyms; CL- 15; CL-17; privacy-preserving
• Public URL: http://researchrepository.napier.ac.uk/Output/2827187