Presentation 2021-03-01
On the Privacy Risk of Exposure Notification Framework: Assessment and Countermeasures
Kazuki Nomoto, Mitsuaki Akiyama, Masashi Eto, Atsuo Inomata, Tatsuya Mori,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) The Exposure Notification Framework uses the Bluetooth Low Energy (BLE) signal generated by a smartphone to determine close contact with a positive person. It is used in COVID-19 contact tracing applications. This decentralized mechanism exchanges anonymous identifiers. The risk of privacy violation is considered to be low. However, there are still insufficient studies on the risks from the technical aspects of the signal strength and transmission cycle of the radio waves emitted by smartphones. In this study, we focus on the privacy risk of Google/Apple's Exposure Notification, and evaluate the threat by field experiments and simulations, focusing on the privacy risk of identifying the facial image of a positive person by using the BLE signal strength and camera images. We will also propose and evaluate effective countermeasures.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Contact tracing / Exposure Notification / COVID-19
Paper # ICSS2020-34
Date of Issue 2021-02-22 (ICSS)

Conference Information
Committee ICSS / IPSJ-SPT
Conference Date 2021/3/1(2days)
Place (in Japanese) (See Japanese page)
Place (in English) Online
Topics (in Japanese) (See Japanese page)
Topics (in English) Security, Trust, etc.
Chair Hiroki Takakura(NII)
Vice Chair Katsunari Yoshioka(Yokohama National Univ.) / Kazunori Kamiya(NTT)
Secretary Katsunari Yoshioka(NICT) / Kazunori Kamiya(KDDI labs.)
Assistant Keisuke Kito(Mitsubishi Electric) / Toshihiro Yamauchi(Okayama Univ.)

Paper Information
Registration To Technical Committee on Information and Communication System Security / Special Interest Group on Security Psychology and Trust
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) On the Privacy Risk of Exposure Notification Framework: Assessment and Countermeasures
Sub Title (in English)
Keyword(1) Contact tracing
Keyword(2) Exposure Notification
Keyword(3) COVID-19
1st Author's Name Kazuki Nomoto
1st Author's Affiliation Waseda University(Waseda Univ.)
2nd Author's Name Mitsuaki Akiyama
2nd Author's Affiliation NTT Secure Platform Laboratories(NTT)
3rd Author's Name Masashi Eto
3rd Author's Affiliation National Institute of Information and Communications Technology(NICT)
4th Author's Name Atsuo Inomata
4th Author's Affiliation Osaka University(Osaka Univ.)
5th Author's Name Tatsuya Mori
5th Author's Affiliation Waseda University/National Institute of Information and Communications Technology(Waseda Univ./NICT)
Date 2021-03-01
Paper # ICSS2020-34
Volume (vol) vol.120
Number (no) ICSS-384
Page pp.pp.49-54(ICSS),
#Pages 6
Date of Issue 2021-02-22 (ICSS)