TC: Medium: Collaborative Research: Pay-as-you-Go: Security and Privacy for Integrated Transportation Payment Systems

TC：媒介：合作研究：即用即付：集成交通支付系统的安全性和隐私性

• 批准号: 0964641
• 负责人: Wayne Burleson
• 金额: $ 84.5万
• 依托单位: University of Massachusetts Amherst
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-06-01 至 2014-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0964641&HistoricalAwards=false
• 关键词: TC; Medium; Collaborative; Research; Pay

Pay-as-you-Go investigates security and privacy for Integrated Transportation Payment Systems (ITPS). The research addresses integrated payments for trains, subways, buses, ferries, and recharging of electric cars, as well as toll collection for roads, bridges, and tunnels. Multi-disciplinary aspects include novel cryptographic protocols and lightweight implementations of privacy-preserving payment systems. Challenges include providing security and privacy in a low-cost, usable, and reliable manner. Payments for transportation differ significantly from general-purpose e-commerce in terms of both security and engineering constraints. For instance, transportation operators wish to observe user behavior to improve the overall performance of the system---seemingly contradicting privacy. Moreover, payment devices must be extremely cheap, mass produced, and tolerant of a wide range of passenger demands.The expected results and activities include: (1) design of novel cryptographic algorithms achieving privacy at low cost while retaining the benefits of meaningful data collection for ITPS; (2) implementation of hardware and software to perform modern cryptographic operations on low-cost devices; and (3) testing of human factors and performance under realistic conditions that must balance security and privacy with cost and usability. The broader impacts are extensive as transportation systems are a critical part of most aspects of society, from the economy, to defense, to public safety. Moreover, information gathered from ITPS applications can facilitate advanced traffic management, travel time estimation, emergency management, congestion pricing, carbon emissions control, and environmental justice assessments. A substantial outreach plan builds on the research team?s significant experience working with transportation professionals in industry and government.

现收现付调查综合运输支付系统(ITPS)的安全和隐私。这项研究涉及火车、地铁、公交车、渡轮和电动汽车充电的综合支付，以及道路、桥梁和隧道的通行费征收。多学科方面包括新颖的加密协议和保护隐私的支付系统的轻量级实现。挑战包括以低成本、可用和可靠的方式提供安全和隐私。在安全和工程限制方面，运输支付与通用电子商务有很大不同。例如，交通运营商希望观察用户行为以提高系统的整体性能-这似乎与隐私相矛盾。此外，支付设备必须非常便宜，大规模生产，并能容忍广泛的乘客需求。预期的结果和活动包括：(1)设计新的密码算法，以低成本实现隐私，同时保留ITPS有意义的数据收集的好处；(2)实施硬件和软件，以在低成本设备上执行现代密码操作；以及(3)在现实条件下测试人的因素和性能，必须在安全和隐私与成本和可用性之间取得平衡。更广泛的影响是广泛的，因为交通系统是社会大多数方面的关键组成部分，从经济到国防，再到公共安全。此外，从ITPS应用程序收集的信息可以促进高级交通管理、旅行时间估计、紧急情况管理、拥堵定价、碳排放控制和环境正义评估。一个实质性的外展计划建立在研究团队的基础上-S，与行业和政府的运输专业人员合作的丰富经验。