{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T16:18:16Z","timestamp":1774628296244,"version":"3.50.1"},"reference-count":131,"publisher":"Wiley","license":[{"start":{"date-parts":[[2020,10,17]],"date-time":"2020-10-17T00:00:00Z","timestamp":1602892800000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Wireless Communications and Mobile Computing"],"published-print":{"date-parts":[[2020,10,17]]},"abstract":"<jats:p>The coronavirus pandemic is a new reality, and it severely affects the modus vivendi of the international community. In this context, governments are rushing to devise or embrace novel surveillance mechanisms and monitoring systems to fight the outbreak. The development of digital tracing apps, which among others are aimed at automatising and globalising the prompt alerting of individuals at risk in a privacy-preserving manner, is a prominent example of this ongoing effort. Very promptly, a number of digital contact tracing architectures have been sprouted, followed by relevant app implementations adopted by governments worldwide. Bluetooth, specifically its Low Energy (BLE) power-conserving variant, has emerged as the most promising short-range wireless network technology to implement the contact tracing service. This work offers the first to our knowledge full-fledged review of the most concrete contact tracing architectures proposed so far in a global scale. This endeavour does not only embrace the diverse types of architectures and systems, namely, centralised, decentralised, or hybrid, but also equally addresses the client side, i.e., the apps that have been already deployed in Europe by each country. There is also a full-spectrum adversary model section, which does not only amalgamate the previous work in the topic but also brings new insights and angles to contemplate upon.<\/jats:p>","DOI":"10.1155\/2020\/8851429","type":"journal-article","created":{"date-parts":[[2020,10,27]],"date-time":"2020-10-27T19:05:08Z","timestamp":1603825508000},"page":"1-29","source":"Crossref","is-referenced-by-count":95,"title":["Demystifying COVID-19 Digital Contact Tracing: A Survey on Frameworks and Mobile Apps"],"prefix":"10.1155","volume":"2020","author":[{"given":"Tania","family":"Martin","sequence":"first","affiliation":[{"name":"European Commission, Joint Research Centre, Ispra 21027, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0142-7503","authenticated-orcid":true,"given":"Georgios","family":"Karopoulos","sequence":"additional","affiliation":[{"name":"European Commission, Joint Research Centre, Ispra 21027, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7697-116X","authenticated-orcid":true,"given":"Jos\u00e9 L.","family":"Hern\u00e1ndez-Ramos","sequence":"additional","affiliation":[{"name":"European Commission, Joint Research Centre, Ispra 21027, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6348-5031","authenticated-orcid":true,"given":"Georgios","family":"Kambourakis","sequence":"additional","affiliation":[{"name":"European Commission, Joint Research Centre, Ispra 21027, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Igor","family":"Nai Fovino","sequence":"additional","affiliation":[{"name":"European Commission, Joint Research Centre, Ispra 21027, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"1","volume-title":"Contact Tracing","author":"WHO","year":"2017"},{"key":"2","volume-title":"Commission Recommendation 2020\/518 of 8 April 2020 on a Common Union Toolbox for the Use of Technology and Data to Combat and Exit from the COVID-19 Crisis, in Particular Concerning Mobile Applications and the Use of Anonymised Mobility Data","author":"E Commission","year":"2020"},{"key":"3","volume-title":"Communication from the Commission - Guidance on Apps Supporting the Fight against COVID-19 Pandemic in relation to Data Protection (2020\/C 124 I\/01)","author":"E Commission","year":"2020"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3006172"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101966"},{"key":"6","article-title":"Dissecting contact tracing apps in the android platform","author":"V. Kouliaridis","year":"2020"},{"key":"7","article-title":"DP-3T, decentralized privacy-preserving proximity tracing","author":"DP-3T"},{"key":"8","article-title":"Pan-European privacy-preserving proximity tracing","author":"PEPP-PT"},{"key":"9","article-title":"Decentralized privacy-preserving proximity tracing","author":"C. Troncoso","year":"2020"},{"key":"10","article-title":"Aims of the Decentralized Privacy-Preserving Proximity (DP-3T) Project","author":"DP-3T","year":"2020"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1145\/2674005.2674994"},{"key":"12","volume-title":"ENExposureConfiguration","author":"Apple","year":"2020"},{"key":"13","volume-title":"Privacy-Preserving Contact Tracing - Apple and Google","author":"Google\/Apple","year":"2020"},{"key":"14","article-title":"Apple and Google update joint coronavirus tracing tech to improve user privacy and developer flexibility","author":"D. Etherington","year":"2020"},{"key":"15","article-title":"First pilot for the Google and Apple-based decentralised tracing app","author":"E. Barraud","year":"2020"},{"key":"16","unstructured":"GviliY.Security analysis of the COVID-19 contact tracing specifications by Apple Inc. and Google Inc.2020Tech. Rep.May 2020, http:\/\/eprint.iacr.org\/2020\/428"},{"key":"17","article-title":"PEPP-PT, Pan-European privacy-preserving proximity tracing, high-level overview","author":"PEPP-PT","year":"2020"},{"key":"18","article-title":"PEPP-PT, Pan-European privacy-preserving proximity tracing, data protection and information security architecture, illustrated on German implementation","author":"PEPP-PT","year":"2020"},{"key":"19","article-title":"ROBERT: ROBust and privacy-presERving proximity Tracing","author":"INRIA PRIVATICS team and Fraunhofer AISEC","year":"2020"},{"key":"20","article-title":"BlueTrace protocol","author":"BlueTrace","year":"2020"},{"key":"21","article-title":"TraceTogether","author":"TraceTogether","year":"2020"},{"key":"22","article-title":"TraceSecure: towards privacy preserving contact tracing","author":"J. Bell","year":"2020"},{"key":"23","article-title":"DESIRE -3rd-way proposal for a European Exposure Notification System","author":"INRIA","year":"2020"},{"key":"24","article-title":"TCN coalition","author":"T. C. N. Coalition","year":"2020"},{"key":"25","article-title":"Privacy and the pandemic: UW and Microsoft researchers present a \u201cPACT\u201d for using technology to fight the spread of COVID-19","author":"Allen School News","year":"2020"},{"key":"26","article-title":"PACT: privacy sensitive protocols and mechanisms for mobile contact tracing","author":"J. Chan","year":"2020"},{"key":"27","article-title":"PACT: private automated contact tracing","author":"MIT"},{"key":"28","article-title":"Fully private open source contact tracing technology","author":"OpenCovidTrace","year":"2020"},{"key":"29","article-title":"Whisper Tracing an open and privacy first protocol for contact tracing","author":"L. Loiseau","year":"2020"},{"key":"30","unstructured":"VaudenayS.Centralized or decentralized? The contact tracing dilemma2020Tech. Rep.http:\/\/eprint.iacr.org\/2020\/531"},{"key":"31","unstructured":"FraunhoferA. I. S. E. C.Pandemic contact tracing apps: DP-3T, PEPP-PT NTK, and ROBERT from a privacy perspective2020Tech. Rep.http:\/\/eprint.iacr.org\/2020\/489"},{"key":"32","article-title":"Proximity tracing approaches comparative impact analysis","author":"INRIA PRIVATICS team","year":"2020"},{"key":"33","article-title":"DESIRE: a practical assessment","author":"The DP-3T Consortium","year":"2020"},{"key":"34","article-title":"Security and privacy analysis of the document \u2018PEPP-PT: data protection and information security architecture\u2019","author":"The DP-3T Project","year":"2020"},{"key":"35","article-title":"Security and privacy analysis of the document \u2018ROBERT: ROBust and privacy-presERving proximity Tracing\u2019","author":"The DP-3T Project","year":"2020"},{"key":"36","unstructured":"VaudenayS.Analysis of DP-3T2020Tech. Rep.May 2020, http:\/\/eprint.iacr.org\/2020\/399"},{"key":"37","article-title":"Response to \u2018Analysis of DP-3T: between scylla and charybdis\u2019","author":"The DP-3T Project","year":"2020"},{"key":"38","doi-asserted-by":"crossref","unstructured":"AvitabileG.BottaV.IovinoV.ViscontiI.Towards defeating mass surveillance and SARS-CoV-2: the Pronto-C2 fully decentralized automatic contact tracing system2020Tech. Rep.May 2020, http:\/\/eprint.iacr.org\/2020\/493","DOI":"10.14722\/coronadef.2021.23013"},{"key":"39","article-title":"DP-3T SDK for Android","author":"DP-3T","year":"2020"},{"key":"40","article-title":"DP-3T SDK for iOS","author":"DP-3T","year":"2020"},{"key":"41","article-title":"Exposure Notification, cryptography specification","author":"Google\/Apple","year":"2020"},{"key":"42","article-title":"The DNS-based authentication of named entities (DANE) transport layer security (TLS) protocol: TLSA","author":"J. Schlyter","year":"2012"},{"key":"43","doi-asserted-by":"crossref","unstructured":"PietrzakK.Delayed authentication: preventing replay and relay attacks in private contact tracing2020Tech. Rep.May 2020, https:\/\/eprint.iacr.org\/2020\/418","DOI":"10.1007\/978-3-030-65277-7_1"},{"key":"44","doi-asserted-by":"publisher","DOI":"10.1145\/3065913.3065923"},{"key":"45","article-title":"Contact tracing BLE sniffer PoC","author":"O. Seiskari","year":"2020"},{"key":"46","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0036"},{"key":"47","unstructured":"CooperA.TschofenigH.AbobaB.PetersonJ.MorrisJ.HansenM.SmithR.Privacy considerations for Internet protocols2013RFC 6973https:\/\/rfc-editor.org\/rfc\/rfc6973.txt"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2014.04.001"},{"key":"49","article-title":"The social-engineer toolkit (SET)","author":"TrustedSec"},{"key":"50","article-title":"Bettercap"},{"key":"51","article-title":"The NHS COVID-19 app support website","author":"NHS"},{"key":"52","article-title":"NHSX source code","author":"NHS"},{"key":"53","article-title":"Coronavirus test, track and trace plan launched on Isle of Wight","author":"UK Department of Health and Social Care","year":"2020"},{"key":"54","article-title":"Next phase of NHS coronavirus (COVID-19) app announced","author":"UK Department of Health and Social Care","year":"2020"},{"key":"55","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3010226"},{"key":"56","article-title":"Stopp Corona App","author":"R. Kreuz","year":"2020"},{"key":"57","article-title":"Europe pins hopes on smarter coronavirus contact tracing apps","author":"Reuters","year":"2020"},{"key":"58","article-title":"Stopp Corona source code","author":"R. Kreuz"},{"key":"59","article-title":"Stopp Corona data protection information","author":"R. Kreuz","year":"2020"},{"key":"60","article-title":"ViruSafe","author":"ScaleFocus","year":"2020"},{"key":"61","article-title":"ViruSafe source code","author":"ScaleFocus","year":"2020"},{"key":"62","article-title":"Stop COVID-19","author":"Croatian Ministry of Health","year":"2020"},{"key":"63","article-title":"Stop COVID-19 source code","author":"Croatian Ministry of Health"},{"key":"64","article-title":"Stop COVID-19 privacy policy","author":"Croatian Ministry of Health","year":"2020"},{"key":"65","article-title":"Private kit: safe paths; privacy-by-design COVID-19 solutions using GPS+Bluetooth for citizens and public health officials","author":"Safepaths","year":"2020"},{"key":"66","article-title":"CovTracer, ensuring privacy - assuring public health","author":"RISE"},{"key":"67","article-title":"CovTracer privacy policy","author":"RISE","year":"2020"},{"key":"68","article-title":"eRouska","author":"eRouska project team"},{"key":"69","article-title":"eRouska source code","author":"eRouska project team"},{"key":"70","article-title":"eRouska: privacy and cookies","author":"eRouska project team"},{"key":"71","article-title":"eRouska: audit and code","author":"eRouska project team"},{"key":"72","article-title":"Smittestop","author":"Danish Ministry of Health and the Elderly"},{"key":"73","article-title":"Smittestop: processing of personal data","author":"Danish Ministry of Health and the Elderly"},{"key":"74","article-title":"Hoia","author":"Estonian Health Board"},{"key":"75","article-title":"Hoia source code","author":"Health and Welfare Information Systems Centre (TEHIK)","year":"2020"},{"key":"76","article-title":"HOIA phone application privacy policy","author":"Health and Welfare Information Systems Centre (TEHIK)"},{"key":"77","article-title":"Koronavilkku","author":"Finnish Institute for Health and Welfare (THL)"},{"key":"78","article-title":"Koronavilkku source code","author":"Finnish Institute for Health and Welfare (THL)"},{"key":"79","article-title":"StopCovid","author":"French Government"},{"key":"80","article-title":"StopCovid source code","author":"INRIA","year":"2020"},{"key":"81","volume-title":"Delib\u00b4 eration no 2020-046 du 24 Avril 2020 Portant Avis Sur un Projet d\u2019Application Mobile d\u00b4 enomm\u00b4 ee\u00b4 StopCovid","author":"CNIL","year":"2020"},{"key":"82","volume-title":"Delib\u00b4 eration no 2020-056 du 25 Mai 2020 Portant Avis Sur un Projet de d\u00b4 ecret Relatif\u00b4 a l\u2019Application` Mobile enomm\u00b4 ee StopCovid","author":"CNIL","year":"2020"},{"key":"83","article-title":"StopCovid France bug bounty program","author":"StopCovid project team"},{"key":"84","article-title":"Corona-Warn-App","author":"Corona-Warn-App open-source project"},{"key":"85","article-title":"Germany flips to Apple-Google approach on smartphone contact tracing","author":"Reuters","year":"2020"},{"key":"86","article-title":"Corona-Warn-App source code","author":"D. Telekom"},{"key":"87","article-title":"Corona-Warn-App: privacy notice","author":"Corona-Warn-App open-source project"},{"key":"88","article-title":"VirusRadar","author":"NextSense"},{"key":"89","article-title":"VirusRadar privacy policy","author":"Hungarian National Center for Public Health"},{"key":"90","article-title":"COVID Tracker","author":"Irish Health Service Executive (HSE)"},{"key":"91","article-title":"COVID Tracker source code","author":"Irish Health Service Executive (HSE)"},{"key":"92","article-title":"COVID Tracker: privacy and data","author":"Irish Health Service Executive (HSE)"},{"key":"93","article-title":"Immuni","author":"Italian Government"},{"key":"94","article-title":"Immuni source code","author":"Bending Spoons SpA","year":"2020"},{"key":"95","article-title":"Apturi Covid","author":"Latvian Ministry of Health and SPKC"},{"key":"96","article-title":"Apturi Covid source code","author":"Latvian Ministry of Health and SPKC"},{"key":"97","article-title":"Apturi Covid: lietotnes privatuma\u00af politika","author":"Latvian Ministry of Health and SPKC"},{"key":"98","article-title":"CoronaMelder","author":"Dutch Ministry of Health, Welfare and Sport"},{"key":"99","article-title":"PrivateTracer","author":"PrivateTracer initiative"},{"key":"100","article-title":"PrivateTracer source code","author":"PrivateTracer initiative"},{"key":"101","article-title":"CoronaMelder source code","author":"Dutch Ministry of Health, Welfare and Sport"},{"key":"102","article-title":"CoronaMelder privacy policy","author":"Dutch Ministry of Health, Welfare and Sport"},{"key":"103","article-title":"Together we can fight coronavirus - download the Smittestopp app","author":"Helsenorge","year":"2020"},{"key":"104","article-title":"ProteGO","author":"Polish Ministry of Digital Affairs","year":"2020"},{"key":"105","article-title":"ProteGO ReadMe","author":"Polish Ministry of Digital Affairs"},{"key":"106","article-title":"ProteGO ReadMe, ProteGO source code","author":"Polish Ministry of Digital Affairs"},{"key":"107","article-title":"ProteGO ReadMe, ProteGO privacy and security audits","author":"Polish Ministry of Digital Affairs"},{"key":"108","article-title":"StayAway Covid","author":"Portuguese Ministry of Health"},{"key":"109","article-title":"StayAway Covid source code","author":"Portuguese Ministry of Health"},{"key":"110","article-title":"StayAway Covid privacy policy","author":"Portuguese Ministry of Health"},{"key":"111","article-title":"ZostanZdravy (StayHealthy)","author":"ZostanZdravy initiative","year":"2020"},{"key":"112","article-title":"ZostanZdravy (StayHealthy) - podmienky ochrany sukromia","author":"ZostanZdravy initiative","year":"2020"},{"key":"113","article-title":"OstaniZdrav","author":"Slovenian National Institute of Public Health and Ministry of Public Administration","year":"2020"},{"key":"114","article-title":"OstaniZdrav source code","author":"Slovenian National Institute of Public Health and Ministry of Public Administration"},{"key":"115","article-title":"OstaniZdrav privacy policy","author":"Slovenian National Institute of Public Health and Ministry of Public Administration","year":"2020"},{"key":"116","article-title":"RadarCOVID","author":"Spanish Government"},{"key":"117","article-title":"RadarCOVID source code","author":"Spanish Government"},{"key":"118","article-title":"RadarCOVID privacy policy","author":"Spanish Government"},{"key":"119","article-title":"SwissCovid","author":"Swiss Federal Office of Public Health (FOPH)"},{"key":"120","article-title":"SwissCovid source code","author":"Swiss Federal Office of Public Health (FOPH)"},{"key":"121","article-title":"SwissCovid privacy policy","author":"Swiss Federal Office of Public Health (FOPH)"},{"key":"122","doi-asserted-by":"crossref","DOI":"10.17487\/rfc6749","article-title":"The OAuth 2.0 authorization framework","author":"D. Hardt","year":"2012"},{"key":"123","article-title":"OpenTrace source code","author":"BlueTrace"},{"key":"124","article-title":"PACT UW - CovidSafe source code","author":"University of Washinghton"},{"key":"125","article-title":"TCN source code","author":"TCN Coalition"},{"key":"126","article-title":"OpenCovidTrace source code","author":"OpenCovidTrace"},{"key":"127","article-title":"Exposure Notification Reference Server source code","author":"Google\/Apple"},{"key":"128","article-title":"Exposure Notifications Android Reference Design source code","author":"Google\/Apple"},{"key":"129","article-title":"PEPP-PT documentation","author":"PEPP-PT","year":"2020"},{"key":"130","article-title":"PEPP-PT NTK core Android source code","author":"PEPP-PT"},{"key":"131","article-title":"PEPP-PT NTK sample Android app source code","author":"PEPP-PT"}],"container-title":["Wireless Communications and Mobile Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/wcmc\/2020\/8851429.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/wcmc\/2020\/8851429.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/wcmc\/2020\/8851429.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,11,25]],"date-time":"2022-11-25T00:08:22Z","timestamp":1669334902000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/wcmc\/2020\/8851429\/"}},"subtitle":[],"editor":[{"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2020,10,17]]},"references-count":131,"alternative-id":["8851429","8851429"],"URL":"https:\/\/doi.org\/10.1155\/2020\/8851429","relation":{},"ISSN":["1530-8677","1530-8669"],"issn-type":[{"value":"1530-8677","type":"electronic"},{"value":"1530-8669","type":"print"}],"subject":[],"published":{"date-parts":[[2020,10,17]]}}}