Humanitarian aid-distribution programs help bring physical goods to people in need. Traditional paper-based solutions to support aid distribution do not scale to large populations and are hard to secure. Existing digital solutions solve these issues, at the cost of collecting large amount of personal information. This lack of privacy can endanger recipients' safety and harm their dignity. In collaboration with the International Committee of the Red Cross, we build a safe digital aid-distribution system. We first systematize the requirements such a system should satisfy. We then propose a decentralized solution based on the use of tokens that fulfills the needs of humanitarian organizations. It provides scalability and strong accountability, and, by design, guarantees the recipients' privacy. We provide two instantiations of our design, on a smart card and on a smartphone. We formally prove the security and privacy properties of these solutions, and empirically show that they can operate at scale.

翻译：人道主义援助分发项目帮助将实体物资送达有需要的人群。传统的纸质解决方案难以扩展到大规模人群且安全性不足。现有的数字解决方案虽解决了这些问题，却以收集大量个人信息为代价。这种隐私缺失可能危及受助者的安全并损害其尊严。我们与红十字国际委员会合作，构建了一个安全的数字援助分发系统。首先系统化了此类系统应满足的需求，随后提出了一种基于代币的去中心化解决方案，满足人道主义组织的需求。该方案具备可扩展性和强问责性，并通过设计保障受助者的隐私。我们提供了两种实施方案——分别基于智能卡和智能手机。通过形式化方法证明了这些方案的安全性与隐私属性，并通过实证验证了其大规模运行能力。