A Secure Automatic Fare Collection System for Time-Based or Distance-Based Services with Revocable Anonymity for Users

Isern-Deyà, Andreu Pere; Vives-Guasch, Arnau; Mut–Puigserver, Macià; Payeras–Capellà, M. Magdalena; Castellà‐Roca, Jordi

doi:10.1093/comjnl/bxs033

Cited by 15 publications

(5 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They discuss the challenges that a privacy-preserving transit system should solve. Later, m-ticketing solutions were proposed, such as [10,38]. Note that the pick-up and drop-off locations in public transportation services (i.e., bus or train stops) are more coarse-grained than in RHSs.…”

Section: Related Workmentioning

confidence: 99%

PrivateRide: A Privacy-Enhanced Ride-Hailing Service

Pham

Dacosta

Jacot-Guillarmod

et al. 2017

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

Abstract:In the past few years, we have witnessed a rise in the popularity of ride-hailing services (RHSs), an online marketplace that enables accredited drivers to use their own cars to drive ride-hailing users. Unlike other transportation services, RHSs raise significant privacy concerns, as providers are able to track the precise mobility patterns of millions of riders worldwide. We present the first survey and analysis of the privacy threats in RHSs. Our analysis exposes high-risk privacy threats that do not occur in conventional taxi services. Therefore, we propose PrivateRide, a privacy-enhancing and practical solution that offers anonymity and location privacy for riders, and protects drivers' information from harvesting attacks. PrivateRide lowers the high-risk privacy threats in RHSs to a level that is at least as low as that of many taxi services. Using real data-sets from Uber and taxi rides, we show that PrivateRide significantly enhances riders' privacy, while preserving tangible accuracy in ride matching and fare calculation, with only negligible effects on convenience. Moreover, by using our Android implementation for experimental evaluations, we show that PrivateRide's overhead during ride setup is negligible. In short, we enable privacyconscious riders to achieve levels of privacy that are not possible in current RHSs and even in some conventional taxi services, thereby offering a potential business differentiator.

show abstract

Section: Related Workmentioning

confidence: 99%

PrivateRide: A Privacy-Enhanced Ride-Hailing Service

Pham

Dacosta

Jacot-Guillarmod

et al. 2017

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

show abstract

“…The efficiency of the use of a virtual ticket, especially over the air, is also important. Later, many applied m-ticketing solutions have been proposed [5,16,22,35,44,45,49]. However, each proposal has some limitations that this paper tries to solve.…”

Section: Related Workmentioning

confidence: 99%

“…Second, the most recent protocols that include the expected level of privacy by protecting users' privacy even against the transport authority still have some efficiency problems. For instance, the BBS based protocol proposed by Isern-Deya et al [35] validates a ticket with a duration of few seconds, even if the implementation has been done on a smartphone. Some recent solutions were close to find the right balance between efficiency and users' privacy.…”

Section: Related Workmentioning

confidence: 99%

A Practical Set-Membership Proof for Privacy-Preserving NFC Mobile Ticketing

Arfaoui

Lalande

Traoré

et al. 2015

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

International audienceTo ensure the privacy of users in transport systems, researchers are working on new protocols providing the best security guarantees while respecting functional requirements of transport operators. In this paper1, we design a secure NFC m-ticketing protocol for public transport that preserves users’ anonymity and prevents transport operators from tracing their customers’ trips. To this end, we introduce a new practical set-membership proof that does not require provers nor verifiers (but in a specific scenario for verifiers) to perform pairing computations. It is therefore particularly suitable for our (ticketing) setting where provers hold SIM/UICC cards that do not support such costly computations. We also propose several optimizations of Boneh-Boyen type signature schemes, which are of independent interest, increasing their performance and efficiency during NFC transactions. Our m-ticketing protocol offers greater flexibility compared to previous solutions as it enables the post-payment and the off-line validation of m-tickets. By implementing a prototype using a standard NFC SIM card, we show that it fulfils the stringent functional requirement imposed by transport operators whilst using strong security parameters. In particular, a validation can be completed in 184.25ms when the mobile is switched on, and in 266.52ms when the mobile is switched off or its battery is flat

show abstract

“…In [27], Isern-Deya and his co-authors propose an automatic fare collection system for temporal and spatial services, which is based on the BBS group signature [28,29]. Thus, they provide revocable anonymity and unlinkability for the users of the service.…”

Section: Privacy-preserving M-ticketing Solutionsmentioning

confidence: 99%

A Privacy-Preserving NFC Mobile Pass for Transport Systems

Arfaoui¹,

Dabosville²,

Gambs³

et al. 2014

ICST Trans Mobile Comm Appl

View full text Add to dashboard Cite

International audienceThe emergence of the NFC (Near Field Communication) technology brings new capacities to the next generation of smartphones, but also new security and privacy challenges. Indeed through its contactless interactions with external entities, the smartphone of an individual will become an essential authentication tool for service providers such as transport operators. However, from the point of view of the user, carrying a part of the service through his smartphone could be a threat for his privacy. Indeed, an external attacker or the service provider himself could be tempted to track the actions of the user. In this paper, we propose a privacy-preserving contactless mobile service, in which a user’s identity cannot be linked to his actions when using the transport system. The security of our proposition relies on the combination of a secure element in the smartphone and on a privacy-enhancing cryptographic protocol based on a variant of group signatures. In addition, although a user should remain anonymous and his actions unlinkable in his daily journeys, we designed a technique for lifting his anonymity in extreme circumstances. In order to guarantee the usability of our solution, we implemented a prototype demonstrating that our solution meets the major functional requirements for real transport systems: namely that the mobile pass can be validated at a gate in less than 300 ms, and this even if the battery of the smartphone is exhausted

show abstract

A Secure Automatic Fare Collection System for Time-Based or Distance-Based Services with Revocable Anonymity for Users

Cited by 15 publications

References 9 publications

PrivateRide: A Privacy-Enhanced Ride-Hailing Service

PrivateRide: A Privacy-Enhanced Ride-Hailing Service

A Practical Set-Membership Proof for Privacy-Preserving NFC Mobile Ticketing

A Privacy-Preserving NFC Mobile Pass for Transport Systems

Contact Info

Product

Resources

About