A Holistic Approach to Enhanced Security and Privacy in Digital Health Passports

TY - GEN

T1 - A Holistic Approach to Enhanced Security and Privacy in Digital Health Passports

AU - Frederiksen, Tore

N1 - Publisher Copyright: © 2021 ACM.

PY - 2021/8

Y1 - 2021/8

N2 - As governments around the world decide to deploy digital health passports as a tool to curb the spread of Covid-19, it becomes increasingly important to consider how these can be constructed with privacy-by-design. In this paper we discuss the privacy and security issues of common approaches for constructing digital health passports. We then show how to construct, and deploy, secure and private digital health passports, in a simple and efficient manner. We do so by using a protocol for distributed password-based token issuance, secret sharing and by leveraging modern smart phones' secure hardware. Our solution only requires a constant amount of asymmetric cryptographic operations and a single round of communication between the user and the party verifying the user's digital health passport, and only two rounds between the user and the server issuing the digital health passport.

AB - As governments around the world decide to deploy digital health passports as a tool to curb the spread of Covid-19, it becomes increasingly important to consider how these can be constructed with privacy-by-design. In this paper we discuss the privacy and security issues of common approaches for constructing digital health passports. We then show how to construct, and deploy, secure and private digital health passports, in a simple and efficient manner. We do so by using a protocol for distributed password-based token issuance, secret sharing and by leveraging modern smart phones' secure hardware. Our solution only requires a constant amount of asymmetric cryptographic operations and a single round of communication between the user and the party verifying the user's digital health passport, and only two rounds between the user and the server issuing the digital health passport.

KW - Digital Heath Passports

KW - Distributed Cryptography

KW - Distributed Signatures

KW - Protocol Deployment

UR - http://www.scopus.com/inward/record.url?scp=85113240199&partnerID=8YFLogxK

U2 - 10.1145/3465481.3469212

DO - 10.1145/3465481.3469212

M3 - Article in proceedings

AN - SCOPUS:85113240199

BT - 16th International Conference on Availability, Reliability and Security, ARES 2021

PB - Association for Computing Machinery

T2 - 16th International Conference on Availability, Reliability and Security, ARES 2021

Y2 - 17 August 2021 through 20 August 2021

ER -