Abstract: Modern urban transportation and car-sharing systems, enabled by digital services, are being increasingly used. These services provide benefits for citizens and providers, but have to be carefully designed in order to be secure and privacy-enhancing. This work presents the analysis of privacy and security challenges in car-sharing platforms, specifically addressing issues, threats, and security challenges such as forensic readiness. We propose a novel and agile privacy-preserving solution tailored for car-sharing environments. Our solution integrates quantum-resistant primitives such as digital signature and group signature schemes, which preserves user privacy and protects against curious service providers and other third parties. Furthermore, the design incorporates forensic readiness by ensuring that despite privacy-preserving mechanisms, sufficient auditable data can be securely retrieved and analyzed in the event of security incidents or disputes, facilitating post-incident investigations without compromising legitimate user privacy. The presented experimental results of used cryptographic operations demonstrate practical applicability and efficiency, even for resource-constrained devices deployed in vehicles and users’ smartphones.
Authors: Lukas Malina, Petr Dzurenda, Minh Tran, Patrik Dobias, Lukas Daubner, Raimundas Matulevičius, Ijeoma Faustina Ekeh