TC: Medium: Collaborative Research: Pay-as-you-Go: Security and Privacy for Integrated Transportation Payment Systems

现收现付调查综合交通支付系统（ITPS）的安全性和隐私性。这项研究涉及火车、地铁、公共汽车、渡轮和电动汽车充电的综合支付，以及道路、桥梁和隧道的收费。多学科方面包括新的加密协议和轻量级的隐私保护支付系统实现。挑战包括以低成本、可用和可靠的方式提供安全和隐私。在安全性和工程限制方面，运输支付与通用电子商务有很大不同。例如，交通运营商希望通过观察用户行为来提高系统的整体性能，这似乎与隐私相矛盾。此外，支付设备必须非常便宜，批量生产，并能容纳广泛的乘客需求。预期结果和活动包括：(1)设计新颖的加密算法，以低成本实现隐私，同时保留ITPS有意义的数据收集的好处；(2)实现在低成本设备上执行现代加密操作的硬件和软件；(3)在现实条件下的人为因素和性能测试，必须在安全性和隐私性与成本和可用性之间取得平衡。更广泛的影响是广泛的，因为交通系统是社会大多数方面的关键组成部分，从经济到国防，到公共安全。此外，从ITPS应用程序收集的信息可以促进先进的交通管理、旅行时间估计、应急管理、拥堵定价、碳排放控制和环境正义评估。一个实质性的拓展计划建立在研究团队的基础上？具有与工业和政府运输专业人员合作的丰富经验。

Pay-as-you-Go investigates security and privacy for Integrated Transportation Payment Systems (ITPS). The research addresses integrated payments for trains, subways, buses, ferries, and recharging of electric cars, as well as toll collection for roads, bridges, and tunnels. Multi-disciplinary aspects include novel cryptographic protocols and lightweight implementations of privacy-preserving payment systems. Challenges include providing security and privacy in a low-cost, usable, and reliable manner. Payments for transportation differ significantly from general-purpose e-commerce in terms of both security and engineering constraints. For instance, transportation operators wish to observe user behavior to improve the overall performance of the system---seemingly contradicting privacy. Moreover, payment devices must be extremely cheap, mass produced, and tolerant of a wide range of passenger demands.The expected results and activities include: (1) design of novel cryptographic algorithms achieving privacy at low cost while retaining the benefits of meaningful data collection for ITPS; (2) implementation of hardware and software to perform modern cryptographic operations on low-cost devices; and (3) testing of human factors and performance under realistic conditions that must balance security and privacy with cost and usability. The broader impacts are extensive as transportation systems are a critical part of most aspects of society, from the economy, to defense, to public safety. Moreover, information gathered from ITPS applications can facilitate advanced traffic management, travel time estimation, emergency management, congestion pricing, carbon emissions control, and environmental justice assessments. A substantial outreach plan builds on the research team?s significant experience working with transportation professionals in industry and government.