Privacy-Preserving Electronic Ticket Scheme with Attribute-Based Credentials

Abstract

Electronic tickets (e-tickets) are electronic versions of paper tickets, which enable users to access intended services and improve services' efficiency. However, privacy may be a concern of e-ticket users. In this paper, a privacy-preserving electronic ticket scheme with attribute-based credentials is proposed to protect users' privacy and facilitate ticketing based on a user's attributes. Our proposed scheme makes the following contributions: (1) users can buy different tickets from ticket sellers without releasing their exact attributes; (2) two tickets of the same user cannot be linked; (3) a ticket cannot be transferred to another user; (4) a ticket cannot be double spent; (5) the security of the proposed scheme is formally proven and reduced to wellknown (q-strong Diffie-Hellman) complexity assumption; (6) the scheme has been implemented and its performance empirically evaluated. To the best of our knowledge, our privacy-preserving attribute-based e-ticket scheme is the first one providing these five features. Application areas of our scheme include event or transport tickets where users must convince ticket sellers that their attributes (e.g. age, profession, location) satisfy the ticket price policies to buy discounted tickets. More generally, our scheme can be used in any system where access to services is only dependent on a user's attributes (or entitlements) but not their identities.

A Construction for Providing Reusability to Mobile Phone-Based e-Tickets

“…Specifically, the proposals [14], [19], [22] make use of pseudonyms so that the system can not link an e-ticket to the identity of the user who acquired it. Other proposals provide anonymity by means of alternative techniques [10]- [12], [18], [20], [21]. In case of fraudulent behavior, some proposals allow anonymity revocation [10]- [12], [14].…”

PriTKT: A Blockchain-Enhanced Privacy-Preserving Electronic Ticket System for IoT Devices

“…Thus, it is crucial to minimize the collection of personal data in line with the recently introduced General Data Protection Regulations (GDPR) [ 9 ]. In this regard, various privacy-protecting e-ticket systems have been proposed which use randomizable signatures with efficient proofs [ 10 , 11 , 12 , 13 , 14 ], pseudonyms [ 15 , 16 ], and anonymous credentials [ 13 , 17 , 18 ]. However, some of these systems lack formal proof of security and cannot guarantee the integrity of the token [ 12 , 13 , 16 ], while others are inefficient in their invoicing operations, making them impossible to deploy on IoT devices [ 18 ].…”

“…This ensures that the e-ticketing system remains practical and user-friendly even in scenarios with a large number of potential attributes. While Han et al [ 18 ] designed the first attribute-based e-ticketing system, their ticket issuance algorithm’s computational cost and communication overhead increases linearly with the number of user attributes, making their scheme impractical to deploy on IoT devices when users have hundreds of attributes.…”

Privacy‐preserving scheme of distributed sensor networks with dynamic code

“…Once the data is eavesdropped, the participants will be subject to other attacks 3 . Considering the needs mentioned above, research related to various privacy‐preserving schemes against eavesdropping attacks 4 has been quite active in recent years.…”