P4TC—Provably-Secure yet Practical Privacy-Preserving Toll Collection
P4TC—Provably-Secure yet Practical Privacy-Preserving Toll Collection
复制标题
DOI：
10.2478/popets-2020-0046
复制
发表时间：
2020-07
影响因子：
--
通讯作者：
Max Hoffmann;Valerie Fetzer;Matthias Nagel;Andy Rupp;Rebecca Schwerdt
中科院分区：
文献类型：
--
作者：
Max Hoffmann;Valerie Fetzer;Matthias Nagel;Andy Rupp;Rebecca Schwerdt
摘要 电子不停车收费（ETC）在世界各地得到广泛应用，不仅为道路基础设施提供资金，而且还通过动态定价实现拥堵管理和减少污染等先进功能。不幸的是，现有系统依赖于用户识别并允许跟踪用户的活动。一些对这种个性化位置数据的滥用行为已经被公开。鉴于计划中的欧洲范围内可互操作的收费系统 EETS 和新的欧盟通用数据保护条例，位置隐私变得尤为重要。在本文中，我们提出了一种灵活的安全模型和加密协议框架，专为在最主要的环境中保护隐私的收费而设计，即专用短程通信（DSRC）ETC。设计当前框架的一个主要挑战是将可证明的安全性和实用性结合起来，其中实用性包括实际性能数据和对现实问题的适当处理，例如损坏的车载单元等。据我们所知，我们的工作是 DSRC 环境中第一个具有严格安全模型和证明的工作，可以说是对 ETC 安全和隐私整体最全面的正式处理。此外，我们还提供了在实际硬件上的原型实现，该硬件已经具有相当实用的性能数据。假设每条车道有一个路边单元，车载单元和路边单元之间的交互预计需要不到一秒的时间，从而实现全速收费。
Abstract Electronic toll collection (ETC) is widely used all over the world not only to finance our road infrastructures, but also to realize advanced features like congestion management and pollution reduction by means of dynamic pricing. Unfortunately, existing systems rely on user identification and allow tracing a user’s movements. Several abuses of this personalized location data have already become public. In view of the planned Europeanwide interoperable tolling system EETS and the new EU General Data Protection Regulation, location privacy becomes of particular importance. In this paper, we propose a flexible security model and crypto protocol framework designed for privacy-preserving toll collection in the most dominant setting, i.e., Dedicated Short Range Communication (DSRC) ETC. A major challenge in designing the framework at hand was to combine provable security and practicality, where the latter includes practical performance figures and a suitable treatment of real-world issues, like broken onboard units etc. To the best of our knowledge, our work is the first in the DSRC setting with a rigorous security model and proof and arguably the most comprehensive formal treatment of ETC security and privacy overall. Additionally, we provide a prototypical implementation on realistic hardware which already features fairly practical performance figures. An interaction between an onboard unit and a road-side unit is estimated to take less than a second allowing for toll collection at full speed assuming one road-side unit per lane.