摘要： 目前的传染病监控大都只是对发病地区居民健康和位置数据的采集和分析，未给出针对接触者健康监控、数据隐私保护和确诊收治的有效方法。因此，提出了一个针对接触者健康监控、位置轨迹记录和疑似处理的完整系统模型，设计了基于手机注册、身份认证和加密机制的个人数据保护方法，进而提出了位置数据库分离存储和双重加密的位置轨迹保护策略。理论安全分析表明：提出的远程监控模型和隐私保护方法，能够有效对抗传输攻击和数据使用过程的隐私泄露。该研究有望为传染病远程防控提供一种新的有效途径。

中图分类号： TP309
文献标识码： A
DOI： 10.19358/j.issn.2096-5133.2021.02.003
引用格式： 李泽琛，司广涛，孟静. 一种针对传染病接触者的远程监控和隐私保护方法[J].信息技术与网络安全，2021，40(2)：14-18，23.

Remote monitoring and privacy protection method for the contacts in infectious disease

Abstract： Most of the developed infectious-surveillance methods just realized the collection and analysis of the health and location data of residents in the affected area, and no any effective method was provided to implement the health monitoring, data privacy protection and treating for suspected patients, simultaneously. Therefore, a novel system model implementing the contacts′ health monitoring, location track recording and suspected handling was proposed in this work. Further, to implement the privacy protection of contacts′ personal information, a set of methods containing phone registration, identity authentication and encryption mechanisms were proposed, and to protect the users′ location information, we proposed the strategies of location data stored in a single database and encrypted by a double encryption mechanism. Theoretical security analysis demonstrated that the proposed remote monitoring system and privacy protection method can effectively defend the attacks in data transmission and privacy leakage in data usage. The research in this paper is expected to provide an effective way for the remote prevention and control of infectious diseases.

Key words : monitoring of infectious disease；contacts；privacy protection；data encryption