Modeling and analyzing the Corona-virus warning app with the Isabelle infrastructure framework

Kammueller, Florian ORCID: https://orcid.org/0000-0001-5839-5488 and Lutz, Bianca (2020) Modeling and analyzing the Corona-virus warning app with the Isabelle infrastructure framework. Garcia-Alfaro, Joaquin, Navarro-Arribas, Guillermo and Herrera-Joancomarti, Jordi, eds. Data Privacy Management, Cryptocurrencies and Blockchain Technology: ESORICS 2020 International Workshops, DPM 2020 and CBT 2020, Guildford, UK, September 17–18, 2020, Revised Selected Papers. In: International Workshop of Data Privacy Management, DPM'20, 17-18 Sep 2020, University of Surrey, UK. pbk-ISBN 9783030661717, e-ISBN 9783030661724. ISSN 0302-9743 [Conference or Workshop Item] (doi:10.1007/978-3-030-66172-4_8)

[img]
Preview
PDF - Final accepted version (with author's formatting)
Download (361kB) | Preview

Abstract

We provide a model in the Isabelle Infrastructure framework of the recently published German Corona-virus warning app (CWA). The app supports breaking infection chains by informing users whether they have been in close contact to an infected person. The app has a decentralized architecture that supports anonymity of users. We provide a formal model of the existing app with the Isabelle Infrastructure framework to show up some natural attacks in a very abstract model. We then use the security refinement process of the Isabelle Infrastructure framework to highlight how the use of continuously changing Ephemeral Ids (EphIDs) improves the anonymity.

Item Type: Conference or Workshop Item (Paper)
Additional Information: International Workshop of Data Privacy Management DPM'20 - co-located with ESORICS'20
Cite this paper as:
Kammüller F., Lutz B. (2020) Modeling and Analyzing the Corona-Virus Warning App with the Isabelle Infrastructure Framework. In: Garcia-Alfaro J., Navarro-Arribas G., Herrera-Joancomarti J. (eds) Data Privacy Management, Cryptocurrencies and Blockchain Technology. DPM 2020, CBT 2020. Lecture Notes in Computer Science, vol 12484. Springer, Cham. https://doi.org/10.1007/978-3-030-66172-4_8
Research Areas: A. > School of Science and Technology > Computer Science
Item ID: 30958
Notes on copyright: The final authenticated version is available online at https://doi.org/10.1007/978-3-030-66172-4_8
Useful Links:
Depositing User: Florian Kammueller
Date Deposited: 11 Sep 2020 16:28
Last Modified: 07 Jul 2021 01:57
URI: https://eprints.mdx.ac.uk/id/eprint/30958

Actions (login required)

View Item View Item

Statistics

Downloads
Activity Overview
61Downloads
77Hits

Additional statistics are available via IRStats2.