A Privacy-Preserving Ticketing System

Verslype, Kristof; Decker, Bart De; Naessens, Vincent; Nigusse, Girma; Lapon, Jorn; Verhaeghe, Pieter

doi:10.1007/978-3-540-70567-3_8

Cited by 6 publications

(2 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There exist proposals in which e-tickets can be used anonymously [6]- [8], [10]- [15]. Some of them [6], [8], [11], [13], [15] include a trusted third-party responsible for managing anonymity, whereas in other proposals [7], [10], [12], [14] anonymity is managed by the ticket issuer itself.…”

Section: A E-ticket Systemsmentioning

confidence: 99%

A Construction for Providing Reusability to Mobile Phone-Based e-Tickets

Borges

Sebé

2020

IEEE Access

View full text Add to dashboard Cite

Nowadays, the use of electronic tickets in public transport is a reality. Several mobile phonebased e-ticket systems have been proposed so far. Even so, very few of them include reusability in the sense that a single e-ticket allows to make several journeys. Although the identity of users is usually hidden behind a pseudonym, the existing proposals providing reusability allow the system to link all the journeys made with a given e-ticket. In this paper we present a privacy-preserving construction allowing to endow a mobile phone-based e-ticket system with reusability. The privacy of users is proven to be preserved even assuming an internal attacker with full access to all the information managed by the system servers. All the sensitive interactions of a user with the system keep anonymous and unlinkable. Further, as a result of an inspection, the system is only able to determine whether the inspected user is allowed to make the current journey.

show abstract

Section: A E-ticket Systemsmentioning

confidence: 99%

A Construction for Providing Reusability to Mobile Phone-Based e-Tickets

Borges

Sebé

2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Similarly, some proposals protect user privacy using anonymous credentials or e-cash schemes. A system based on anonymous credentials is designed by Verslype et al [23]. However, the system is not flexible enough for public transport systems, as it does not consider the option of pricing per travelled distance or reduction plans.…”

Section: Related Workmentioning

confidence: 99%

Privacy-Preserving Public Transport Ticketing System

Milutinovic

Decroix

Naessens

et al. 2015

Data and Applications Security and Privacy XXIX

Self Cite

View full text Add to dashboard Cite

Abstract. The public transport ticketing systems are undergoing significant changes in recent years. The tickets can now be issued and presented in digital form, significantly improving the user experience. The digital data is also used to improve the services' efficiency. Travelling patterns and route occupancy can be analysed to adjust the frequency and coverage of the service. However, data recorded by the providers extends the information that is needed for simple analysis. The travel passes that are issued usually contain unique identifiers, allowing to trace the movement of users, which can even be linked to their identities. In order to tackle these privacy issues, we propose a novel, privacy-preserving ticketing system, based on a scheme for issuing and redemption of unlinkable certified tokens. The design also allows offering advanced services, such as reduction plans or monthly passes, without introducing privacy concerns. Even though the travellers' actions cannot be linked, the service providers are given assurances against possible misuse, and are able to control the usage of the issued products. Additionally, experimental evaluation shows that the system performance is adequate for practical applications.

show abstract

Towards Usable Interfaces for Proof Based Access Rights on Mobile Devices

Heupel

Kesdoğan

2012

Open Problems in Network Security

View full text Add to dashboard Cite

Access rights management is in the middle of many collaboration forms such as group formation or sharing of information in different kinds of scenarios. There are some strong mechanisms to achieve this, like anonymous credential systems. However in general their usage is not very intuitive for lay users. In this paper we show the potential of using proof-based credential systems like Idemix to enhance the usability of privacy-respecting social interaction in different collaborative settings. For instance transparently performing authorization without any user intervention at the level of the user interface becomes possible. In order to improve the usability, we complement this by introducing a mental model for intuitive management of digital identities. The approach should also empower users to define their own access restrictions when sharing data, by building custom proof specifications on the fly. We show this exemplary with a developed prototype application for supporting collaborative scenarios on a mobile device. We also present first evaluation results of an early prototype and address current as well as future work.

show abstract

A Privacy-Preserving Ticketing System

Cited by 6 publications

References 9 publications

A Construction for Providing Reusability to Mobile Phone-Based e-Tickets

A Construction for Providing Reusability to Mobile Phone-Based e-Tickets

Privacy-Preserving Public Transport Ticketing System

Towards Usable Interfaces for Proof Based Access Rights on Mobile Devices

Contact Info

Product

Resources

About