Secure contact tracing platform from simplest private set intersection cardinality

Abstract

Contact tracing is an essential tool for controlling the spread of disease through human populations. However, existing contact tracing applications are either vulnerable to privacy and security attacks or heavy bandwidth/computational requirements on the client's devices. In this work, we introduce SecureCT, a Secure Contact Tracing platform with strong privacy protection and lightweight cost. SecureCT prevents linkage attacks, eliminates replay and relay attacks, and allows the phone's holder to delegate their contact tracing computation to untrusted servers while maintaining the user's privacy. The technical core of our scheme is an efficient Private Set Intersection Cardinality protocol which only relies on symmetric-key primitives. We evaluate its performance to show the feasibility of our proposed system in practice.