Privacy for Public Transportation

Heydt-Benjamin, Thomas S.; Chae, Hee-Jin; Defend, Benessa; Fu, Kevin

doi:10.1007/11957454_1

Cited by 62 publications

(55 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We can use this metric to evaluate the presence of a specific patterns in the shared dataset. Another interesting work in this direction is [61] which operates by complementing existing techniques with post randomization methods.…”

Section: Business Intelligencementioning

confidence: 99%

Insider Threats in Emerging Mobility-as-a-Service Scenarios

Callegati¹,

Giallorenzo

Melis³

et al. 2017

Proceedings of the 50th Hawaii International Conference on System Sciences (2017)

View full text Add to dashboard Cite

Abstract-Mobility as a Service (MaaS) applies the everything-asa-service paradigm of Cloud Computing to transportation: a MaaS provider offers to its users the dynamic composition of solutions of different travel agencies into a single, consistent interface.Traditionally, transits and data on mobility belong to a scattered plethora of operators. Thus, we argue that the economic model of MaaS is that of federations of providers, each trading its resources to coordinate multi-modal solutions for mobility. Such flexibility comes with many security and privacy concerns, of which insider threat is one of the most prominent. In this paper, we follow a tiered structure -from individual operators to markets of federated MaaS providers -to classify the potential threats of each tier and propose the appropriate countermeasures, in an effort to mitigate the problems.

show abstract

Section: Business Intelligencementioning

confidence: 99%

Insider Threats in Emerging Mobility-as-a-Service Scenarios

Callegati¹,

Giallorenzo

Melis³

et al. 2017

Proceedings of the 50th Hawaii International Conference on System Sciences (2017)

View full text Add to dashboard Cite

show abstract

“…Pirker et al described how to make use of certain hardware capabilities of some mobile phones to build a secure, NFC-based, privacy-preserving, prepaid payment system [30], but the system requires the devices accepting a payment to be online at all times. Heydt-Benjamin et al [23] proposed the use of recent advances in anonymous credentials and e-cash to design offline privacy-preserving public transportation payment systems. They consider a hybrid system with two kinds of tickets: passive RFID transponders and embedded systems such as cell phones.…”

Section: Related Workmentioning

confidence: 99%

Efficient E-Cash in Practice: NFC-Based Payments for Public Transportation Systems

Hinterwälder

Zenger

Baldimtsi

et al. 2013

Privacy Enhancing Technologies

View full text Add to dashboard Cite

Abstract. Near field communication (NFC) is a recent popular technology that will facilitate many aspects of payments with mobile tokens. In the domain of public transportation payment systems electronic payments have many benefits, including improved throughput, new capabilities (congestion-based pricing etc.) and user convenience. A common concern when using electronic payments is that a user's privacy is sacrificed. However, cryptographic e-cash schemes provide provable guarantees for both security and user privacy. Even though e-cash protocols have been proposed three decades ago, there are relatively few actual implementations, since their computation complexity makes an execution on lightweight devices rather difficult. This paper presents an efficient implementation of Brands [11] and ACL [4] e-cash schemes on an NFC smartphone: the BlackBerry Bold 9900. Due to their efficiency during the spending phase, when compared to other schemes, and the fact that payments can be verified offline, these schemes are especially suited for, but not limited to, use in public transport. Additionally, the encoding of validated attributes (e.g. a user's age range, zip code etc.) is possible in the coins being withdrawn, which allows for additional features such as variable pricing (e.g. reduced fare for senior customers) and privacy-preserving data collection. We present a subtle technique to make use of the ECDHKeyAgreement class that is available in the BlackBerry API (and in the API of other systems) and show how the schemes can be implemented efficiently to satisfy the tight timing imposed by the transportation setting.

show abstract

“…A common application of such cyber-physical systems is billing, e.g. for toll collection [2,22,26], public transportation [11,17,28], or electric vehicle charging [21]. The cyber-physical sensor records our identity, time, location and consumption.…”

Section: Introductionmentioning

confidence: 99%

“…No information -in the clear -is revealed during this process. This approach has been taken in [2,11,17,21,22,26,28]. Similar approaches can be realized using secure multi-party computation [4, 5, 13-16, 18, 19, 30].…”

Section: Introductionmentioning

confidence: 99%

Privacy-Preserving Observation in Public Spaces

Kerschbaum

Lim²

2015

Computer Security -- ESORICS 2015

View full text Add to dashboard Cite

Abstract. One method of privacy-preserving accounting or billing in cyber-physical systems, such as electronic toll collection or public transportation ticketing, is to have the user present an encrypted record of transactions and perform the accounting or billing computation securely on them. Honesty of the user is ensured by spot checking the record for some selected surveyed transactions. But how much privacy does that give the user, i.e. how many transactions need to be surveyed? It turns out that due to collusion in mass surveillance all transactions need to be observed, i.e. this method of spot checking provides no privacy at all. In this paper we present a cryptographic solution to the spot checking problem in cyber-physical systems. Users carry an authentication device that authenticates only based on fair random coins. The probability can be set high enough to allow for spot checking, but in all other cases privacy is perfectly preserved. We analyze our protocol for computational efficiency and show that it can be efficiently implemented even on platforms with limited computing resources, such as smart cards and smart phones.

show abstract

Privacy for Public Transportation

Cited by 62 publications

References 19 publications

Insider Threats in Emerging Mobility-as-a-Service Scenarios

Insider Threats in Emerging Mobility-as-a-Service Scenarios

Efficient E-Cash in Practice: NFC-Based Payments for Public Transportation Systems

Privacy-Preserving Observation in Public Spaces

Contact Info

Product

Resources

About