Abstract
Electronic toll collection (ETC) systems make it easier for drivers to pay the fee for driving on toll roads. Nevertheless, digitalization of any process enables the service provider to collect digital records containing an accurate description of all the transactions carried out by users. This is the case for ETC systems. Moreover, records about road usage contain data about people’s driving habits, from which highly sensitive personal information can be inferred. Hence, these systems should be designed in such a way that the privacy of drivers is preserved. In this paper we present an ETC system which guarantees that drivers pay the amount corresponding to their journeys while preserving their privacy in the sense that all the interactions of a car with the system are anonymous and unlinkable. To the best of our knowledge, this is the first ETC proposal in which the system server is unable to link the entrance and exit points of a trip. The security of the proposal has been analyzed, while its performance has been tested from a prototype implementation which proves its feasibility.




Similar content being viewed by others
Code availability
The code used in the experiments will be provided if requested by e-mail to the authors.
Notes
Alternatively, a mobile phone with the mentioned features could play the on-board computer role.
References
Jiang, H., Li, J., Zhao, P., Zeng, F., Xiao, Z., Iyengar, A.: Location privacy-preserving mechanisms in location-based services: a comprehensive survey. ACM Comput. Surv. (2022). https://doi.org/10.1145/3423165
Mansour, M.B., Salama, C., Mohamed, H.K., Hammad, S.A.: VANET security and privacy—an overview. Int. J. Netw. Secur. Appl. (2018). https://doi.org/10.2139/ssrn.3290553
Amiri, W.A., Baza, M., Banawan, K., Mahmoud, M., Alasmary, W., Akkaya, K.: Privacy-preserving smart parking system using blockchain and private information retrieval. In: 2019 Intl. Conf. on Smart Applications, Communications and Networking, pp. 1–6 (2019). https://doi.org/10.1109/SmartNets48225.2019.9069783
Borges, R., Sebé, F.: An efficient privacy-preserving pay-by-phone system for regulated parking areas. Int. J. Inf. Secur. 20, 715–727 (2021). https://doi.org/10.1007/s10207-020-00527-2
General Data Protection Regulation (GDPR)—Official Legal Text. https://gdpr-info.eu/ (2022). Accessed 2 June 2022
Via-T. Sistema de telepeaje. https://www.viat.es/ (2022). Accessed 2 June 2022
Iseki, H., Demisch, A.: Examining the linkages between electronic roadway tolling technologies and road pricing policy objectives. Res. Transp. Econ. 36(1), 121–132 (2012). https://doi.org/10.1016/j.retrec.2012.03.008
Soni, A., Kaur, S.: Automated car number plate detection system to detect far number plates. Int. J. Sci. Technol. Eng. 3(1), 82–89 (2016)
Anowar, M.T., Khan, M.N.H., Kabir, M.A., Hossen, M.D., Alam, M.M., Sunny, M.R., Hasan, M.M.: Application of dedicated short-range communication within M-commerce and intelligent transportation services, and its global adaptation using RFID technology. Imp. J. Interdiscip. Res. 2(7) (2016)
Popoola, S.I., Popoola, O.A., Oluwaranti, A.I., Badejo, J.A., Atayero, A.A.: A Framework for electronic toll collection in smart and connected communities. In: Proc. of the World Congress on Engineering and Computer Science (2017)
Chattoraj, S., Bhowmik, S., Vishwakarma, K., Roy, P.: Design and implementation of low cost electronic toll collection system in India. In: Second Intl. Conf. on Electrical, Computer and Communication Technologies (ICECCT), pp. 1–4 (2017). https://doi.org/10.1109/ICECCT.2017.8117934
Tan, J.Y., Ker, P.J., Mani, D., Arumugam, P.: GPS-based highway toll collection system: novel design and operation. Cogent Eng. 4(1) (2017). https://doi.org/10.1080/23311916.2017.1326199
Alese, B., Thompson, A., Ayeni, O., Folasade, A.: A secure alternative for electronic toll collection using barcodes. Commun. Appl. Electron. 7, 19–24 (2020). https://doi.org/10.5120/cae2020652860
Ken, W.O.: Privacy issues in electronic toll collection. Transp. Res. Part C Emerg. Technol. 9(2), 123–134 (2001). https://doi.org/10.1016/S0968-090X(00)00041-3
Riley, P.: The tolls of privacy: an underestimated roadblock for electronic toll collection usage. Comput. Law Secur. Rev. 24(6), 521–528 (2008). https://doi.org/10.1016/j.clsr.2008.09.006
Balasch, J., Rial, A., Troncoso, C., Preneel, B., Verbauwhede, I.M.R., Geuens, C.: PrETP: privacy-preserving electronic toll pricing. In: 19th USENIX Security Symposium, pp. 63–78 (2010)
Meiklejohn, S., Mowery, K., Checkoway, S., Shacham, H.: The phantom tollbooth: privacy-preserving electronic toll collection in the presence of driver collusion. In: 20th USENIX Security Symposium (2011)
Isern-Deyá, A., Vives-Guasch, A., Mut-Puigserver, M., Payeras-Capellá, M.: A secure automatic fare collection system for time-based or distance-based services with revocable anonymity for users. Comput. J. 56(10), 1198–1215 (2013). https://doi.org/10.1093/comjnl/bxs033
Barki, A., Brunet, S., Desmoulins, N., Gambs, S., Gharout, S., Traoré, J.: Private eCash in practice (short paper). In: Financial Cryptography and Data Security (FC 2016). Lecture Notes in Computer Science, vol. 9603. Springer, Berlin (2017). https://doi.org/10.1007/978-3-662-54970-4_6
Hoffmann, M., Fetzer, V., Nagel, M., Rupp, A., Schwerdt, R.: P4TC—provably-secure yet practical privacy-preserving toll collection. Proc. Priv. Enhanc. Technol. (3), 62–152 (2020)
McEntyre, J., Kihei, B.: Zero-knowledge proof for enabling privacy preserving electronic toll collection with vehicle-to-everything communications. In: IEEE Intl. Conf. on Consumer Electronics (2022). https://doi.org/10.1109/ICCE53296.2022.9730305
Didouh, A., Lopez, A.B., Hillali, Y.E., Rivenq, A., Faruque, M.A.A.: Eve, you shall not get access! A cyber-physical blockchain architecture for electronic toll collection security. In: 2020 IEEE 23rd Intl. Conf. on Intelligent Transportation Systems (ITSC), pp. 1–7 (2020). https://doi.org/10.1109/ITSC45102.2020.9294334
Karim, H., Rawat, D.B.: TollsOnly please—homomorphic encryption for toll transponder privacy in internet of vehicles. IEEE Internet Things J. 9(4), 2627–2636 (2022). https://doi.org/10.1109/JIOT.2021.3056240
Naor, M., Yung, M.: Universal one-way hash functions and their cryptographic applications. In: Proc. of the 25th annual ACM symposium on Theory of Computing (STOC’89), pp. 33–43. ACM (1989). https://doi.org/10.1145/73007.73011
Rivest, R., Shamir, A., Adleman, L.: A method for obtaining digital signatures and public-key cryptosystems. Commun. ACM 21(2), 120–126 (1978). https://doi.org/10.1145/359340.359342
Chaum, D.: Blind signatures for untraceable payments. In: Chaum, D., Rivest, R.L., Sherman, A.T. (eds.) Advances in Cryptology, pp. 199–203. Springer, Boston (1983). https://doi.org/10.1007/978-1-4757-0602-4_18
Hankerson, D., Menezes, A.: Elliptic Curve Cryptography. Springer, Berlin (2006)
Gayoso-Martínez, V., Hernández-Encinas, L., Sánchez-Ávila, C.: A survey of the elliptic curve integrated encryption scheme. J. Comput. Sci. Eng. 2(2), 7–13 (2010)
Aiello, B., Ishai, Y., Reingold, O.: Priced oblivious transfer: how to sell digital goods. In: Pfitzmann, B. (ed.) Advances in Cryptology, pp. 119–135. Springer, Berlin (2001). https://doi.org/10.1007/3-540-44987-6_8
Camenisch, J., Dubovitskaya, M., Neven, G.: Unlinkable priced oblivious transfer with rechargeable wallets. In: Sion, R. (ed.) Financial Cryptography and Data Security, pp. 66–81. Springer, Berlin (2010). https://doi.org/10.1007/978-3-642-14577-3_8
Federal Office for Information Security. Cryptographic Mechanisms: Recommendations and Key Lengths. https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TG02102/BSI-TR-02102-1.pdf (2022)
Acknowledgements
This study was funded by the Spanish Ministry of Science, Innovation and Universities (project number MTM2017-83271-R).
Funding
This study was funded by the Spanish Ministry of Science, Innovation and Universities (project number MTM2017-83271-R).
Author information
Authors and Affiliations
Contributions
All authors contributed to the study conception and design. Prototype implementation and experiments were performed by Ricard Borges. The security analysis was performed by Francesc Sebé. The first draft of the manuscript was written by Ricard Borges. All authors commented on previous versions of the manuscript. All authors read and approved the final manuscript.
Corresponding author
Ethics declarations
Conflict of interest
The authors have no conflicts of interest to declare that are relevant to the content of this article.
Additional information
Publisher's Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
Springer Nature or its licensor holds exclusive rights to this article under a publishing agreement with the author(s) or other rightsholder(s); author self-archiving of the accepted manuscript version of this article is solely governed by the terms of such publishing agreement and applicable law.
About this article
Cite this article
Borges, R., Sebé, F. & Valls, M. An anonymous and unlinkable electronic toll collection system. Int. J. Inf. Secur. 21, 1151–1162 (2022). https://doi.org/10.1007/s10207-022-00604-8
Published:
Issue Date:
DOI: https://doi.org/10.1007/s10207-022-00604-8