论文标题
PCT-TEE:具有可信赖的执行环境的基于轨迹的私人联系跟踪系统
PCT-TEE: Trajectory-based Private Contact Tracing System with Trusted Execution Environment
论文作者
论文摘要
现有的基于蓝牙的私人接触跟踪(PCT)系统可以私下检测人们是否与19岁的患者直接接触。但是,我们发现现有系统缺乏功能和灵活性,这可能会损害接触追踪的成功。具体而言,他们无法检测到间接接触(例如,即使没有直接接触,人们也可能因使用相同的电梯而暴露于冠状病毒);他们还不能灵活地更改“风险接触”的规则,例如接触多少小时或与COVID-19患者被认为是风险暴露的患者,可能会随着环境状况而改变。在本文中,我们提出了一个有效且安全的接触跟踪系统,该系统可以直接接触和间接接触。为了解决上述问题,我们需要利用用户的轨迹数据进行私人联系跟踪,我们称之为基于轨迹的PCT。我们将这个问题正式化为时空私人集体交叉点。通过分析可以扩展以解决此问题的不同方法(例如同态加密),我们确定可信赖的执行环境(TEE)是达到我们要求的一种建议。主要的挑战是如何在有限的TEE安全记忆下设计时空私有套件交叉路口的算法。为此,我们设计了一个基于TEE的系统,该系统具有灵活的轨迹数据编码算法。我们对现实世界数据的实验表明,所提出的系统可以在几秒钟内对数以千计的轨迹数据记录进行数千个查询。
Existing Bluetooth-based Private Contact Tracing (PCT) systems can privately detect whether people have come into direct contact with COVID-19 patients. However, we find that the existing systems lack functionality and flexibility, which may hurt the success of the contact tracing. Specifically, they cannot detect indirect contact (e.g., people may be exposed to coronavirus because of used the same elevator even without direct contact); they also cannot flexibly change the rules of "risky contact", such as how many hours of exposure or how close to a COVID-19 patient that is considered as risk exposure, which may be changed with the environmental situation. In this paper, we propose an efficient and secure contact tracing system that enables both direct contact and indirect contact. To address the above problems, we need to utilize users' trajectory data for private contact tracing, which we call trajectory-based PCT. We formalize this problem as Spatiotemporal Private Set Intersection. By analyzing different approaches such as homomorphic encryption that could be extended to solve this problem, we identify that Trusted Execution Environment (TEE) is a proposing method to achieve our requirements. The major challenge is how to design algorithms for spatiotemporal private set intersection under limited secure memory of TEE. To this end, we design a TEE-based system with flexible trajectory data encoding algorithms. Our experiments on real-world data show that the proposed system can process thousands of queries on tens of million records of trajectory data in a few seconds.