Paper 2018/1106
P4TC---Provably-Secure yet Practical Privacy-Preserving Toll Collection
Max Hoffmann and Valerie Fetzer and Matthias Nagel and Andy Rupp and Rebecca Schwerdt
Abstract
Electronic toll collection (ETC) is widely used all over the world not only to finance our road infrastructures, but also to realize advanced features like congestion management and pollution reduction by means of dynamic pricing. Unfortunately, existing systems rely on user identification and allow tracing a user’s movements. Several abuses of this personalized location data have already become public. In view of the planned European-wide interoperable tolling system EETS and the new EU General Data Protection Regulation, location privacy becomes of particular importance. In this paper, we propose a flexible security model and crypto protocol framework designed for privacy-preserving toll collection in the most dominant setting, i.e., Dedicated Short Range Communication (DSRC) ETC. As opposed to our work, most related cryptographic proposals target a less popular type of toll collection based on Global Navigation Satellite Systems (GNSS), or do not come with a thorough security model and proof. A major challenge in designing the framework at hand was to combine provable security and practicality, where the latter includes practical performance figures and a suitable treatment of real-world issues, like broken on-board units etc. To the best of our knowledge, our work is the first in the DSRC setting with a rigorous security model and proof and arguably the most comprehensive formal treatment of ETC security and privacy overall. For our ETC system, we make use of and significantly extend a payment protocol building block, called BBA+, introduced at ACM CCS 2017. Additionally, we provide a prototypical implementation on realistic hardware. This implementation already features fairly practical performance figures, even though there is still room for optimizations. An interaction between an on-board unit and a road-side unit is estimated to take less than a second allowing for toll collection at full speed assuming one road-side unit per lane.
Metadata
- Available format(s)
- Category
- Cryptographic protocols
- Publication info
- Preprint. MINOR revision.
- Keywords
- Toll CollectionLocation PrivacyProvable SecurityUniversal Composability
- Contact author(s)
-
andy rupp @ rub de
matthias nagel @ kit edu
valerie fetzer @ kit edu
max hoffmann @ rub de
rebecca schwerdt @ kit edu - History
- 2019-12-12: last of 3 revisions
- 2018-11-16: received
- See all versions
- Short URL
- https://ia.cr/2018/1106
- License
-
CC BY